General

  • Target

    287eb21d376a5b52be1582d3ae6f5d9dbc97c63333d3d8f2626611382cb292f4

  • Size

    207KB

  • MD5

    d2f66d706c2d33a20ad8ca45be82ba6d

  • SHA1

    bb37df521de3f11209d9c1c82e49066a87183004

  • SHA256

    287eb21d376a5b52be1582d3ae6f5d9dbc97c63333d3d8f2626611382cb292f4

  • SHA512

    ebe05968b08455e81e30db847d775e32508eb1e64866f90e7f105704ee963b62b615dcbf47dfc8b868d852e59e8f58fa0c4b23e4beeb3365a316ceab6562fc4c

  • SSDEEP

    3072:meyygm3ORQQ0OkSJ7hqVjoSdoxx4KcWmjRrzyAyAtWgoJSWYVo2ASOvojoS:mlm3ORQkNhqVjj+VPj92d62ASOwj

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 287eb21d376a5b52be1582d3ae6f5d9dbc97c63333d3d8f2626611382cb292f4
    .exe windows:1 windows x86 arch:x86

    26babd76bbb7f9c516a338b0601b4c9f


    Headers

    Imports

    Sections