General

  • Target

    3439a8b4deddd76125b9128f4d10ac7a17df43146718217175156179fa353c19N

  • Size

    161KB

  • MD5

    55935b4fc5a67fa2b7233b6c63280850

  • SHA1

    80411a52d4c3848b75075147fbe378d541225111

  • SHA256

    3439a8b4deddd76125b9128f4d10ac7a17df43146718217175156179fa353c19

  • SHA512

    a1d317150b58246e64881ba6f2ce9e23d78fd4f32641753ff6a3358c971e8bbc59e178167cc3a1073e8bc7e7852f42d191c35bd39355cd96625c63e359ee3e64

  • SSDEEP

    3072:NqVEUPjE8vxNTlQddpIO66RXPpwkNVwtCJXeex7rrIRZK8K8/kv:sEAvfOddM6kkNVwtmeetrIyR

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3439a8b4deddd76125b9128f4d10ac7a17df43146718217175156179fa353c19N
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections