General

  • Target

    d061cc882379d2e9f2316c3527d301c454e47cc76147f46dc77c8ea56a20f21eN

  • Size

    108KB

  • MD5

    f71f6c20ec5edc0228e9883989a37150

  • SHA1

    1646f15129303f677f84ffec37d0ed6773591fd9

  • SHA256

    d061cc882379d2e9f2316c3527d301c454e47cc76147f46dc77c8ea56a20f21e

  • SHA512

    01f5cf36dbdf91a3eee6584e689348a05d52f9bc87f7bf873f9dc96290fa8ea5dfdef7507ed8a745f1cda1d7d27a90eaab72c092a2621e9773c85a62ffaf5355

  • SSDEEP

    1536:dkST48d9Kio8e42dAvATw80Dsad8csiLvuFcFmKcUsvKwF:dh9DnOqkWr8guFcFmKcUsvKwF

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d061cc882379d2e9f2316c3527d301c454e47cc76147f46dc77c8ea56a20f21eN
    .exe windows:1 windows x86 arch:x86

    26babd76bbb7f9c516a338b0601b4c9f


    Headers

    Imports

    Sections