General

  • Target

    17979db9d8b9b582603cfaf23b9ed03ecd685dd280927c6fad5bfc3c6eed068eN

  • Size

    192KB

  • MD5

    df6b3ff447a435a9e3748a8b6f6e4740

  • SHA1

    047e84a394e7035188262fe60b2ea1c9c8289724

  • SHA256

    17979db9d8b9b582603cfaf23b9ed03ecd685dd280927c6fad5bfc3c6eed068e

  • SHA512

    8271ee09d34378a22d1911d168abdce621239da6bcd6ab1d6933010749e274049042876e7e4ed69519f3d6359d34b7c8581c8741090e88fcb18205355c3a7c7d

  • SSDEEP

    3072:rAGLUBEMV4E1ik3hW+/eAMq3FQo7fnEBctcp/+wreVism:rAGLKV/A4erq3FF7fPtcsw6U1

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 17979db9d8b9b582603cfaf23b9ed03ecd685dd280927c6fad5bfc3c6eed068eN
    .exe windows:1 windows x86 arch:x86

    26babd76bbb7f9c516a338b0601b4c9f


    Headers

    Imports

    Sections