General

  • Target

    f4088a1a0e8216b7d489461bee976b0091b4b54cc0c299183e617d7c59f59300

  • Size

    128KB

  • MD5

    ea87962d2b684bc556a971a2dc061d18

  • SHA1

    41feb192a4862b01552e454a4dd9244aa8b77aec

  • SHA256

    f4088a1a0e8216b7d489461bee976b0091b4b54cc0c299183e617d7c59f59300

  • SHA512

    428ed67b5ca1bf9d2f86685f885bc2aea5f115c172f3f53083efd6136c37c43c34ef97fb4c7e76597595b7bd6019a24d151f52432b98c234ca5cdcb4a98ea384

  • SSDEEP

    3072:+/a3IJP71XXaavxC5ccDd1AZoUBW3FJeRuaWNXmgu+tB:Ya3O5Kap4cedWZHEFJ7aWN1B

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f4088a1a0e8216b7d489461bee976b0091b4b54cc0c299183e617d7c59f59300
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections