General

  • Target

    25606db688c369d830df7f7e6259ddc7454464175dc2eb4a1b86eb79afedb2af

  • Size

    128KB

  • MD5

    c426838bfb62fa0133ed64f8e01e3411

  • SHA1

    75acb8814e0fc1d28a8362336a93f66abb294b02

  • SHA256

    25606db688c369d830df7f7e6259ddc7454464175dc2eb4a1b86eb79afedb2af

  • SHA512

    33a40c736c5a2ca14cdeddbe536ca0a3f94427aa15219a812e204a0bee6550b6992401c4d6db4ce6edac364b249a3afa98e3cd88aea0d4227931ec02e641e3d1

  • SSDEEP

    3072:yveva2dHSvJN4Sv66x53ekilybwf1nFzwSAJB8g:yveaTsSyy5Alv1n6xJmg

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 25606db688c369d830df7f7e6259ddc7454464175dc2eb4a1b86eb79afedb2af
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections