General

  • Target

    707e1709e2449898e894d7570af3ec9f5d0860b0ae4839a37fa282a00aec0fbc

  • Size

    256KB

  • MD5

    d30ec77676447b20222eaa6bb9638039

  • SHA1

    d84157a16c8795117ed532eb0774625ddb77fff7

  • SHA256

    707e1709e2449898e894d7570af3ec9f5d0860b0ae4839a37fa282a00aec0fbc

  • SHA512

    2a77d2b4cc499574a211c5024402d5121c52fe35debdcc7edb4c1402429ac32ff51471bc89d7fa97d82f9f1d9f62620f31dfe46dac63d32a288cef56a4848a3b

  • SSDEEP

    6144:buw8NsRRIgTLp103ETiZ0moGP/2dga1mcywM:bP0+R7pScXwuR1mKM

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 707e1709e2449898e894d7570af3ec9f5d0860b0ae4839a37fa282a00aec0fbc
    .exe windows:1 windows x86 arch:x86

    26babd76bbb7f9c516a338b0601b4c9f


    Headers

    Imports

    Sections