General

  • Target

    36f44e74c677a048b9d612902fed0a877acfe4eadd6fb652b6d32fa04c60bb94N

  • Size

    205KB

  • MD5

    7aa1252289684c495af86e871a951d20

  • SHA1

    d0e3461ada21825aaf086232c6d0a6c8a2257cf9

  • SHA256

    36f44e74c677a048b9d612902fed0a877acfe4eadd6fb652b6d32fa04c60bb94

  • SHA512

    7db61b3ca39c90f34e76ae9d585bc539553cffd271633c2dad646b55db0a735e5743a5cebac3f3182618db21ee8e717a8ed5a26bc94eaa274b7f977ce76f6a7b

  • SSDEEP

    6144:ocMLqDx7/d1GyZ6YugQdjGG1wsKm6eBgdQbz:Z4q97/PGyXu1jGG1wsGeBg8

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 36f44e74c677a048b9d612902fed0a877acfe4eadd6fb652b6d32fa04c60bb94N
    .exe windows:1 windows x86 arch:x86

    26babd76bbb7f9c516a338b0601b4c9f


    Headers

    Imports

    Sections