General

  • Target

    a768b0f24df5b37b3e8b934c5b3436e40452e74cf936aa354b3fe95083760b86N

  • Size

    198KB

  • MD5

    8517afb7988ccb4ec9144d25c9c4ee10

  • SHA1

    0ba32bf76818bdbd95fcf0f78078d4d49554a4c9

  • SHA256

    a768b0f24df5b37b3e8b934c5b3436e40452e74cf936aa354b3fe95083760b86

  • SHA512

    d6a1041284b26bb9a05e6e84174c908b36ad5b25922a7a59b871a4b31991774b0849c4dce193f57cc598622857b3c17714fb1bfa7803697efbbf5a431dfe1d44

  • SSDEEP

    3072:jeZ/vCPG/507GL8xpayGi44Sp+7H7wWkqrifbdB7dYk1Bx8DpsV6OzrCIwfE:ip205TL8xpazi4BOHhkym/89bKws

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a768b0f24df5b37b3e8b934c5b3436e40452e74cf936aa354b3fe95083760b86N
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections