General

  • Target

    a088c5933ac42e6239d8ad82bc28ad0fe7f751a4eb1c0b054f8ea98fc1a6e32fN

  • Size

    123KB

  • MD5

    07506247d8e3a67999dbbdf7b159be80

  • SHA1

    1dde2247a8d8df4f9486e55c7b6007d8bc5438e4

  • SHA256

    a088c5933ac42e6239d8ad82bc28ad0fe7f751a4eb1c0b054f8ea98fc1a6e32f

  • SHA512

    cf49f7350b7db0c17686b10e61bc8f77dbdeb7f18fd35d3c98e86b51c724b9a09cdd7653bd07b578b93d43ddbd7b8cc1efb3b1efbcbe8413e15c8e13f7804d5e

  • SSDEEP

    3072:qkK8wriEstLTj6n+NVqRYSa9rR85DEn5k7r8:D/wGXlvWGVq4rQD85k/8

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a088c5933ac42e6239d8ad82bc28ad0fe7f751a4eb1c0b054f8ea98fc1a6e32fN
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections