General

  • Target

    356308857ab3e09bb4f1ff3714211e3ab8d675b12c1fd202e9e40819302fb6cf

  • Size

    217KB

  • MD5

    d1df555d3349df4ba47b375ebfadf6a8

  • SHA1

    780b34ef5e9c2d4370d8fcd97e4ecf5e95baabf7

  • SHA256

    356308857ab3e09bb4f1ff3714211e3ab8d675b12c1fd202e9e40819302fb6cf

  • SHA512

    63f7e4abdb70c204f67df4dd1da5f7dec2885fc78a3a361330777c5a45b084ef29bd52b2130be93b1bd2011751e5749d2f8ff5c6fab27d5a7660743f33d6e50e

  • SSDEEP

    3072:gmJtWWK0+Sq7i/DMLoGq8UTeS5pAgYIqGvJ6887lbyMGjXF1kqaholmtbCQVD:gGA7ibS/UTdZMGXF5ahdt3

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 356308857ab3e09bb4f1ff3714211e3ab8d675b12c1fd202e9e40819302fb6cf
    .exe windows:1 windows x86 arch:x86

    26babd76bbb7f9c516a338b0601b4c9f


    Headers

    Imports

    Sections