General

  • Target

    32b86a00b91851b9262a3025705557dadcdd71a41c512ea8c94f5df5055e92f9N

  • Size

    159KB

  • MD5

    b1de6e5cb4c4851544f70cfe60397750

  • SHA1

    61ac2d9a01c721ad6854b8535294b00afd027538

  • SHA256

    32b86a00b91851b9262a3025705557dadcdd71a41c512ea8c94f5df5055e92f9

  • SHA512

    ea0139612f0d121291c1b7fe4c4daef7afa5f315fbbf4d63c52a057d40e56b1ee051e9d88a2deade929e652b717564e86b895d03ad6bba29bc25493db002a0eb

  • SSDEEP

    3072:2N7RBftwD9mlQtDn20+kbwf1nFzwSAJB8FgBY5nd/M9dA:w/ft69mlyCl1n6xJmPM9dA

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 32b86a00b91851b9262a3025705557dadcdd71a41c512ea8c94f5df5055e92f9N
    .exe windows:1 windows x86 arch:x86

    26babd76bbb7f9c516a338b0601b4c9f


    Headers

    Imports

    Sections