General

  • Target

    02c8eedfc4f4defd3a7b4c553a79db89ccffbda77f6eca65da566fd97be2a975N

  • Size

    159KB

  • MD5

    e6764701cf4e8cba2125e52d0e58f430

  • SHA1

    a1bfaf601d000d489a6349166809a9b296fdc923

  • SHA256

    02c8eedfc4f4defd3a7b4c553a79db89ccffbda77f6eca65da566fd97be2a975

  • SHA512

    0871373a03614ae518dbe5b9fc8a471315d33d1ea346197b8e7fdcc1f46bffe07c7eb4d66f185e51a9e563bf8f0a50b4f17a452101a27843b701dfd975becd8e

  • SSDEEP

    3072:qoLxiR0HNnGI+GQ9bwf1nFzwSAJB8FgBY5nd/M9dA:qBR+KG1n6xJmPM9dA

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 02c8eedfc4f4defd3a7b4c553a79db89ccffbda77f6eca65da566fd97be2a975N
    .exe windows:1 windows x86 arch:x86

    26babd76bbb7f9c516a338b0601b4c9f


    Headers

    Imports

    Sections