General

  • Target

    5ffdf53c390e3f56253323cd8d182bfdaaea35eca878a686ac5f6e4e91c1dbefN

  • Size

    110KB

  • MD5

    d27268d4c22d63de33eb28c694a30b30

  • SHA1

    643f865ce267b85689680b987f93abbb63e7a7de

  • SHA256

    5ffdf53c390e3f56253323cd8d182bfdaaea35eca878a686ac5f6e4e91c1dbef

  • SHA512

    2aad6b6d700316359bf76e2de404e72712e8f16fbf53ee20f623e5b8cb3b1c4a682916158d9f06571b1959256a03a8243d2aed99a5336f117a5c8b9934b202fa

  • SSDEEP

    3072:MyO5cJfE6umTSDlUc8jxy2fTLJiXSk6IXP:IgSZ8jxy2qSk6k

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 5ffdf53c390e3f56253323cd8d182bfdaaea35eca878a686ac5f6e4e91c1dbefN
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections