General

  • Target

    9cd6c8c7075a6ea167ecb55096fb9eac033201f9ac398b68eba5b64bd16f31a1N

  • Size

    207KB

  • MD5

    fdbe0352ae07e702b5dda16fa74ead90

  • SHA1

    2a4df8c81749287c7ea748e6b71a616b3474e6dc

  • SHA256

    9cd6c8c7075a6ea167ecb55096fb9eac033201f9ac398b68eba5b64bd16f31a1

  • SHA512

    e38a4ed86d16795856726154e93946bb317a4cb792bbbb0d54d907ef919f9fb268eb37647bdab25110848fb10a0899275d43fbbd53749aa6c5d1d33cb71030e9

  • SSDEEP

    3072:Iqunt/vbE+iwPzoqS2n6VjoSdoxx4KcWmjRrzyAyAtWgoJSWYVo2ASOvojoS:cntzPz3S2n6Vjj+VPj92d62ASOwj

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 9cd6c8c7075a6ea167ecb55096fb9eac033201f9ac398b68eba5b64bd16f31a1N
    .exe windows:1 windows x86 arch:x86

    26babd76bbb7f9c516a338b0601b4c9f


    Headers

    Imports

    Sections