General

  • Target

    5fdf5c5de09ba294f39e57ba7ac099e950fc1ded6c7d7e4f4e6d1517c5b2a9c3N

  • Size

    192KB

  • MD5

    2dc4a181dba78a3a1c01f0ab7ea7d800

  • SHA1

    259c876302d44c2ce4a279c3ab9a8f568f4fa7ed

  • SHA256

    5fdf5c5de09ba294f39e57ba7ac099e950fc1ded6c7d7e4f4e6d1517c5b2a9c3

  • SHA512

    6a43458aa6a7638e7b29844e17e805729a8ab8495dc8289b797d6fd0947b3517d7b8967304fe0a2be09a812c9d41c88735ee6f27819748e9e8b257e15f7cb013

  • SSDEEP

    3072:DmLgg/mWJCyIy0I07Wia3kremwc/gHq/Wp+YmKfxgQdxvzSTsXXoT2z:SMghJCyIy0ImWia3/fc/UmKyIxLDXXo8

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 5fdf5c5de09ba294f39e57ba7ac099e950fc1ded6c7d7e4f4e6d1517c5b2a9c3N
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections