General

  • Target

    a2d13a478d859206d38e8a5c10c3399277da1fe3dd2bf4b00e6d8e65792d02a1N

  • Size

    207KB

  • MD5

    9fd88bb51ad0b0bb415c0442cad36100

  • SHA1

    42f240591548e11e2d3a68405a39b05409828868

  • SHA256

    a2d13a478d859206d38e8a5c10c3399277da1fe3dd2bf4b00e6d8e65792d02a1

  • SHA512

    721aeaf8677d7526ee9b965f6827041b31f784b3dd0befbe305880ac6d3115d4d89d2becb775adbd97afc48d514bd95de37381e00c0ac8c4227e93cc0d7aa6b4

  • SSDEEP

    3072:OIbcEBeBqBzMG2gpZUjtGfXVjoSdoxx4KcWmjRrzyAyAtWgoJSWYVo2ASOvojoS:TcRBgmGfXVjj+VPj92d62ASOwj

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a2d13a478d859206d38e8a5c10c3399277da1fe3dd2bf4b00e6d8e65792d02a1N
    .exe windows:1 windows x86 arch:x86

    26babd76bbb7f9c516a338b0601b4c9f


    Headers

    Imports

    Sections