General

  • Target

    0a2470e027cdaef84c241cd21f291ff903bab5dfdd7309740f30e6286f539ad2N

  • Size

    123KB

  • MD5

    a2b737af407316db56c0d5f8d828ec10

  • SHA1

    8c23758d214affce1be6348d0d0919cea9e58ffa

  • SHA256

    0a2470e027cdaef84c241cd21f291ff903bab5dfdd7309740f30e6286f539ad2

  • SHA512

    5b45675822896e87daf7b6663290a81b6837e554c4455fb1dd84d9ba52e0f1e32f37951aad3e75e89030ce0cb83e3573acfdbf3f4f01a65438b1a2d454423e19

  • SSDEEP

    3072:bw7mYGJ306BZsQvoZP7urboZkwMJDZU/4RYSa9rR85DEn5k7r8:bMjcpdb15m44rQD85k/8

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0a2470e027cdaef84c241cd21f291ff903bab5dfdd7309740f30e6286f539ad2N
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections