General

  • Target

    3ab42d3044b7b0e2daf5dc7f5b9f1f68d0d35a015402c1bdb1994779daf539dbN

  • Size

    192KB

  • MD5

    7d864be909e0e7990a5ff46804154b60

  • SHA1

    b4350e3db0b4905871b993f6df36b3545d3ef222

  • SHA256

    3ab42d3044b7b0e2daf5dc7f5b9f1f68d0d35a015402c1bdb1994779daf539db

  • SHA512

    437d1ade8d2efcfd3ff2d0fa3007c37e117b8621c1bdec0d9fae5735c2356e0b3c17fc02b3de7f235acb8207ac207d98755c7ffcb6c72f2d580bedfc791f51cc

  • SSDEEP

    3072:UaS4qx1i0Cq1mUtb6ft2EceFKPD375lHzpa1P2FU6UK7q4+5DbGTO6GQd3JSZO5L:UaS4qxI1q0Utb6IEceYr75lHzpaF2e6T

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3ab42d3044b7b0e2daf5dc7f5b9f1f68d0d35a015402c1bdb1994779daf539dbN
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections