General

  • Target

    aecb553b6bebfc05638f79826123c4ac65d8822dd33f97dc615d1ed7ec41f639N

  • Size

    256KB

  • MD5

    61f635a36d310921b9d1da0c93add700

  • SHA1

    4ab0622e04bb4580a174c18db5bc7ba6645b53f8

  • SHA256

    aecb553b6bebfc05638f79826123c4ac65d8822dd33f97dc615d1ed7ec41f639

  • SHA512

    6d449d045b3a09dd070b945a728ab1110763b76cdc34ee40d1b307d688d3e145a424908af0e19e6bae08c5cd64203af60ff0fb17e2c5cafc508871b048821a70

  • SSDEEP

    3072:XeF3AeJYA89KS26hvHNE0kVQ1UkY1UkVHe1rUtst76UtoUtFVgtRQ2c+j:cj3OKnGvHNE0f1PY1PRe19V+j

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • aecb553b6bebfc05638f79826123c4ac65d8822dd33f97dc615d1ed7ec41f639N
    .exe windows:1 windows x86 arch:x86

    26babd76bbb7f9c516a338b0601b4c9f


    Headers

    Imports

    Sections