General

  • Target

    41116ca45f2862977b2e11b385a08c4474804f4d0697c8bb840e5729a308dd5aN

  • Size

    192KB

  • MD5

    c13012f8fd237009fc9435d3d5276180

  • SHA1

    76324784b54d554d9d9119fc0087ffe7afb380ba

  • SHA256

    41116ca45f2862977b2e11b385a08c4474804f4d0697c8bb840e5729a308dd5a

  • SHA512

    0930d7f4feda5b4b4389765fcd738f7aab27c356aefe6f4d00fa0da8d1935db23370314ac2a08636bb28d7d86b127055001f5cf11c682dc704c4a39595004d97

  • SSDEEP

    3072:Q7WnHuGnh9QUU4OBLNHHH+c6uE7woutkTy27zU:rnnFsL/E7woSkTl7zU

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 41116ca45f2862977b2e11b385a08c4474804f4d0697c8bb840e5729a308dd5aN
    .exe windows:1 windows x86 arch:x86

    26babd76bbb7f9c516a338b0601b4c9f


    Headers

    Imports

    Sections