General

  • Target

    ec0911d37e62f58215d9b68e41a6df47608d71871155223ebe9b9e69a5d8e408N

  • Size

    144KB

  • MD5

    f67b9c694782c18c906b59938f8af5c0

  • SHA1

    b7e0cb42d3084b965458f7337a40d9c2bd0a8d86

  • SHA256

    ec0911d37e62f58215d9b68e41a6df47608d71871155223ebe9b9e69a5d8e408

  • SHA512

    24c18473c3efb2b5750b67e1b27a705baf7afcb515cec74e7b513e6b02025a2fbc374f3d14112d18383ea4fd038bfbe3d1c5109438bef9d038b13770cde213b8

  • SSDEEP

    3072:6j38ijs/lcf83Pp/ZhwCf0HRCIzGYJpD9r8XxrYnQg4sI+:wmlck3h/FfeRCyGyZ6Yu+

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ec0911d37e62f58215d9b68e41a6df47608d71871155223ebe9b9e69a5d8e408N
    .exe windows:1 windows x86 arch:x86

    26babd76bbb7f9c516a338b0601b4c9f


    Headers

    Imports

    Sections