General

  • Target

    a4cd2dfc21468f86d28019ff68f605199e32e9168ac57ea61936bfa58f5e5d76N

  • Size

    109KB

  • MD5

    a5a8d28215f6e5cef56ac0030e208a80

  • SHA1

    57b196df5843d653c4445c5467127c9a73c086c1

  • SHA256

    a4cd2dfc21468f86d28019ff68f605199e32e9168ac57ea61936bfa58f5e5d76

  • SHA512

    31dcd13b7a469938529548139cd16b5aababa48f17071efc56fe6142996dfa5db70cdf32983e7f40bddbc0a618a57c81a5e572fd0e14055d8bd11f8304566c00

  • SSDEEP

    3072:qFbprPCWPWc08OYNjB9p9JJ9ALCqwzBu1DjHLMVDqqkSp:XWeVgN9rbJ9gwtu1DjrFqh

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a4cd2dfc21468f86d28019ff68f605199e32e9168ac57ea61936bfa58f5e5d76N
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections