General

  • Target

    ca17536579577bc7906d8c06231b224fa15f16f0d1dbf78daf726ec499242f14N

  • Size

    256KB

  • MD5

    cd4b7e85a5c58a9590628279339253b0

  • SHA1

    5e4cdbe7a93b80197e6d3710584d0c59d0cb7e13

  • SHA256

    ca17536579577bc7906d8c06231b224fa15f16f0d1dbf78daf726ec499242f14

  • SHA512

    43c9b92db1ff2909fbaa9d852bed9de076163ee74bcfb3f848f71c9e004ce7fde1922343b1e05f103f6fd4d5bf0223260cfcb4428c71ccb182e539a7c35e9d15

  • SSDEEP

    3072:B14ORVL7VeL1PIaVP3WI4Q1UkY1UkVHe1rUtst76UtoUtFVgtRQ2c+j:B+OnL7gL133D1PY1PRe19V+j

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ca17536579577bc7906d8c06231b224fa15f16f0d1dbf78daf726ec499242f14N
    .exe windows:1 windows x86 arch:x86

    26babd76bbb7f9c516a338b0601b4c9f


    Headers

    Imports

    Sections