General

  • Target

    dad7f44d918fcb4fdc5e5c50faed01805ad40a964173a6efd6d04394de899231N

  • Size

    276KB

  • MD5

    ff2e1cc13495457d870903fd630a63d0

  • SHA1

    49aebc0a753bed456f0d5fad4a0bcc00dd664c06

  • SHA256

    dad7f44d918fcb4fdc5e5c50faed01805ad40a964173a6efd6d04394de899231

  • SHA512

    eebf791ed07ca283913103ef587f00983bc33931115a84b1ef0aae2c10a56dcaec10e45a8a46e9c40bbadfbffff9c748f1837a60db5f9acc287f39b65c215989

  • SSDEEP

    3072:RvcvfZsDJKWSJjDd1AZoUBW3FJeRuaWNXmgu+tAcrbFAJc+RsUi1aVDkOvhJjvJW:Rkv8SJ3dWZHEFJ7aWN1rtMsQBOSGaF+

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • dad7f44d918fcb4fdc5e5c50faed01805ad40a964173a6efd6d04394de899231N
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections