General

  • Target

    f21b7135ac5dc912c5532811dd5c509d743be3d7d173a0f3e1658e438a395cf6

  • Size

    276KB

  • MD5

    aa5c52ab6f9914a22972c675e4436151

  • SHA1

    8bf3d3fde0e54559119b552656a7e1fa6d1623d3

  • SHA256

    f21b7135ac5dc912c5532811dd5c509d743be3d7d173a0f3e1658e438a395cf6

  • SHA512

    51a6d5e02718fc4d9ae84c9340fba3f693e26fbbb22960da4704e1668d90aad3581975bf76ec79c9e46ba8bb9ec4747e0d134101d793c862ad6eec1b3369a98d

  • SSDEEP

    6144:M+BChmac3mvScdZMGXF5ahdt3rM8d7TtLa:M+BC5Mm3XFWtJ9O

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f21b7135ac5dc912c5532811dd5c509d743be3d7d173a0f3e1658e438a395cf6
    .exe windows:1 windows x86 arch:x86

    26babd76bbb7f9c516a338b0601b4c9f


    Headers

    Imports

    Sections