General

  • Target

    fa2b911d612891e50aeb8bddb4c02e6b4f74f51bcda8bf0a8a6f9b29a7ce7283N

  • Size

    128KB

  • MD5

    a8e804f16932a26e74aef22c4b274070

  • SHA1

    85fd06f1ae50f5b63d54d2f552fd70740a514e0c

  • SHA256

    fa2b911d612891e50aeb8bddb4c02e6b4f74f51bcda8bf0a8a6f9b29a7ce7283

  • SHA512

    838c30301d2d947540853054a76a289177d2de7b8a590de484f72d9d094e7b5b5bd50baca6084cd32a23ddbde5de3906324d817398d0d8efaa14177bae7c5a69

  • SSDEEP

    3072:EBCGKy6VC0VZNEvc413e4Bn1G08uFafmHURHAVgnvedh6:EEnC0VDUH3rG08uF8YU8gnve7

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • fa2b911d612891e50aeb8bddb4c02e6b4f74f51bcda8bf0a8a6f9b29a7ce7283N
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections