General

  • Target

    f17d1dc54241c02c179243f677fd7230fd922f2c24a9e4aa62de2e812e00b022

  • Size

    192KB

  • MD5

    81bb054cc20aba453338ce4661de8782

  • SHA1

    3c11f92f14b87cfd424c04568d36de361a1fe134

  • SHA256

    f17d1dc54241c02c179243f677fd7230fd922f2c24a9e4aa62de2e812e00b022

  • SHA512

    f70ba6943c172e4d6e22f3a67d98d48c531c7a6c96622aac99c5fb41af40f08cc4b5b487c945ce83efb72e26a6f9eb2a9ca78220796e7dc736960679ad4d8a36

  • SSDEEP

    3072:ca/4gsbldftRmEHQIKtKD27LX7koutkTy27zU:cH7ftRmEHQzEifLkoSkTl7zU

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f17d1dc54241c02c179243f677fd7230fd922f2c24a9e4aa62de2e812e00b022
    .exe windows:1 windows x86 arch:x86

    26babd76bbb7f9c516a338b0601b4c9f


    Headers

    Imports

    Sections