General

  • Target

    e5a7e304ce068e65b471ae6b9ad4297b6b2ba61904493ffc4c26c3703de76b2dN

  • Size

    207KB

  • MD5

    a0812b6c23eed33851e732396a4592b0

  • SHA1

    90edc54acd4eb65a90a901c8fb80e6c033a97909

  • SHA256

    e5a7e304ce068e65b471ae6b9ad4297b6b2ba61904493ffc4c26c3703de76b2d

  • SHA512

    067899db303ec320cff4a46d1435dd7842594cb298c183e64e0c69dd772b5a051e02261d52461b8a1f63cd12ec098607c7e09143a3a1abd020ad3150e57cb868

  • SSDEEP

    3072:9Add0DZHjT9Nlba6i3aC10+NoNtDYElPZOVjoSdoxx4KcWmjRrzyAyAtWgoJSWYn:9AONhG6rZPZOVjj+VPj92d62ASOwj

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • e5a7e304ce068e65b471ae6b9ad4297b6b2ba61904493ffc4c26c3703de76b2dN
    .exe windows:1 windows x86 arch:x86

    26babd76bbb7f9c516a338b0601b4c9f


    Headers

    Imports

    Sections