General

  • Target

    32a37f6b8f41effb02aa5b2ac53714defe07cc1b7af9811e14d7d0ebb59555c3

  • Size

    123KB

  • MD5

    786cca08c0c3b8d7f5017953ae6e71bf

  • SHA1

    e797d35232c433137f0d697579e41b082d507a61

  • SHA256

    32a37f6b8f41effb02aa5b2ac53714defe07cc1b7af9811e14d7d0ebb59555c3

  • SHA512

    38b0cef227c8d6d6f0fd60c0459fd8861710f0732bb7b0af5e5c6d8e759fb77a2c420baa8f9e2e350cf4a4948c147b3607c9dc8deb8b49100d736bcad1c9952d

  • SSDEEP

    3072:K8JusPWyRn27Sgz4iqlWRYSa9rR85DEn5k7r:K8J5WyRn27SLi2W4rQD85k/

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 32a37f6b8f41effb02aa5b2ac53714defe07cc1b7af9811e14d7d0ebb59555c3
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections