General

  • Target

    0b4de437b37ebd5158edaa4431a9bcd100217ca8b0eaf3fe44193a74f3d6ffb8N

  • Size

    207KB

  • MD5

    e62c9d563c24f518ebf94e9486380e80

  • SHA1

    a3e38267cdad24ea2b019b1700728da5dad7ebb9

  • SHA256

    0b4de437b37ebd5158edaa4431a9bcd100217ca8b0eaf3fe44193a74f3d6ffb8

  • SHA512

    0981e9cb28e0f76022e776e414a536c5fba29d7aa971fb5520bdb29f4c6bd9b13c2cd574db4e4ee23d3612714f01facb1205833cc43f4c0a973aa2f0d59185aa

  • SSDEEP

    3072:U1XbG+badSUzzTkrkmVjoSdoxx4KcWmjRrzyAyAtWgoJSWYVo2ASOvojoS:U1LG+6SM8rkmVjj+VPj92d62ASOwj

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0b4de437b37ebd5158edaa4431a9bcd100217ca8b0eaf3fe44193a74f3d6ffb8N
    .exe windows:1 windows x86 arch:x86

    26babd76bbb7f9c516a338b0601b4c9f


    Headers

    Imports

    Sections