General

  • Target

    3a793dc54dbd814488beb2e0eba1b83b42f82bee0216c897edabbf13fc3ab3c9

  • Size

    224KB

  • MD5

    e726e8fa6a7f21c146d14b24ea3c3c66

  • SHA1

    27f4f4094388be3a384a4d692dbecd32ee476349

  • SHA256

    3a793dc54dbd814488beb2e0eba1b83b42f82bee0216c897edabbf13fc3ab3c9

  • SHA512

    648c3de55e4e3ca04aaf028d921bdafeb9c5c219c4a566052c2f0f1d48abfb7c1c73bf928ecf58701d5640cb1e4e6e0609098d8b19443867f853a7b020741cf6

  • SSDEEP

    6144:J+f6bqtjSEi5LRlUivKvUmKyIxLDXXoq9F1:sf6bqtjSvZoivKv32XXf9/

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3a793dc54dbd814488beb2e0eba1b83b42f82bee0216c897edabbf13fc3ab3c9
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections