General

  • Target

    d5cfb2caf0f63752c3b25b59444ebdd73b587e5fcb3b0db24e987c51afdaebe1N

  • Size

    256KB

  • MD5

    ed1219e3995dbb6097b740c6631fc450

  • SHA1

    a3da60f7af5a20b68d7ae6e06b85c518a313473c

  • SHA256

    d5cfb2caf0f63752c3b25b59444ebdd73b587e5fcb3b0db24e987c51afdaebe1

  • SHA512

    ae50c992abe77c7ced0e36ca6bccc554397f64260c4cd3d70cc7eaf7c2e65745e5a4c02351d57f304f15c2222a8ec15c28fb1568853cd46ca35d9f12309acab5

  • SSDEEP

    6144:ktVORhLDJfV+tbFOLM77OLnFe3HCqxNRmJ4PavntV:gVOmtsNePmjvtV

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d5cfb2caf0f63752c3b25b59444ebdd73b587e5fcb3b0db24e987c51afdaebe1N
    .exe windows:1 windows x86 arch:x86

    26babd76bbb7f9c516a338b0601b4c9f


    Headers

    Imports

    Sections