General

  • Target

    88fd2ff3da3fb7eb42a7af581eb555826d7c3f5d5a20fcd2dc2188c7a73bf74eN

  • Size

    198KB

  • MD5

    b0a39023d33dc585700c9604387f7590

  • SHA1

    d91c9b8319989cdd6cd36c35e0491458cc1c8f24

  • SHA256

    88fd2ff3da3fb7eb42a7af581eb555826d7c3f5d5a20fcd2dc2188c7a73bf74e

  • SHA512

    7769c0cb8b2a19986f15757fc4584f4e904288aed675805023782cf54d6db6d18f445af419a468a1d18f3b952e44798eb793f359cce6e55cf7afe971510f0129

  • SSDEEP

    3072:CRQZwuRKQpI6xwgTfuk0KRTHwjZNib4Sp+7H7wWkqrifbdB7dYk1Bx8DpsV6Ozrx:ue0qxHqk0KpH0ibBOHhkym/89bKws

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 88fd2ff3da3fb7eb42a7af581eb555826d7c3f5d5a20fcd2dc2188c7a73bf74eN
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections