General

  • Target

    24300e1b37b18ebde088cdda1d9b6e62c29ee1bbe4750d9417698122ba26ec2eN

  • Size

    205KB

  • MD5

    c856607d1bfd9810518fb9ae1ecb0040

  • SHA1

    f6998e96867ecde533aa7e4d09ba4a479046d8e8

  • SHA256

    24300e1b37b18ebde088cdda1d9b6e62c29ee1bbe4750d9417698122ba26ec2e

  • SHA512

    d269bdc99cb04ad4b993a100cdb729646772d4ece459f7cbc791ae1e3d1bb962b6099b9064b2203459a5ec1177c146d317a7af2a1acbcfa66c545b0f0c7ba37c

  • SSDEEP

    6144:YlcYlFIgdO/GyZ6YugQdjGG1wsKm6eBgdQbz:YlxIscGyXu1jGG1wsGeBg8

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 24300e1b37b18ebde088cdda1d9b6e62c29ee1bbe4750d9417698122ba26ec2eN
    .exe windows:1 windows x86 arch:x86

    26babd76bbb7f9c516a338b0601b4c9f


    Headers

    Imports

    Sections