General

  • Target

    724bd26398d8502f6c87aea6d040a214cd0298ff058d8f4bfc3f4f40ada80648N

  • Size

    128KB

  • MD5

    cbb272376df94bbcfa2f7f2f85172cd0

  • SHA1

    3c7d642cd0a17cf128e714e4d8ea5231c53a874a

  • SHA256

    724bd26398d8502f6c87aea6d040a214cd0298ff058d8f4bfc3f4f40ada80648

  • SHA512

    08e9f6d384472f18d4177216c49c1b2325283539a5c6883d04a225e61d8267da39416857949cda82b63564f0824068650b2bfe7e8846ddbdefad0a0769dd5cfe

  • SSDEEP

    3072:GAGj94bDPaJUtwuLrSsAx63FQo7fnEBctcp:TGj90dtw8msAx63FF7fPtc

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 724bd26398d8502f6c87aea6d040a214cd0298ff058d8f4bfc3f4f40ada80648N
    .exe windows:1 windows x86 arch:x86

    26babd76bbb7f9c516a338b0601b4c9f


    Headers

    Imports

    Sections