General

  • Target

    a5842bb25fd26d6941ddf6efb3d3bcffb68621c147b5f97cab49a2976c25dc67N

  • Size

    121KB

  • MD5

    decd2bdcbf4e16e543f2ba11596e61e0

  • SHA1

    9c2397039b8460f077e084550a3f8349a30bc6f1

  • SHA256

    a5842bb25fd26d6941ddf6efb3d3bcffb68621c147b5f97cab49a2976c25dc67

  • SHA512

    e74ae40f114dc025e6caaf8f79cf68f62bb69eaf33093e5742e3f48311e2447b3016a6b3c937a69007841f7c077c257ba50fd69d98c5c8e8ebfe43bc52a16dc3

  • SSDEEP

    3072:0ekys2eqkgyrJ494pTcgAULtHO7AJnD5tvv:0hys2kJpTcgAUL9Oarvv

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a5842bb25fd26d6941ddf6efb3d3bcffb68621c147b5f97cab49a2976c25dc67N
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections