General

  • Target

    dcf0fbea9b2e88d24dc4408db18566e77dc2487497aba7a7fa97861f5dc92b2aN

  • Size

    192KB

  • MD5

    c545743c4a2a03dfc017e05021e89680

  • SHA1

    2a93e844e8272dae04f24e767b279b5716471c91

  • SHA256

    dcf0fbea9b2e88d24dc4408db18566e77dc2487497aba7a7fa97861f5dc92b2a

  • SHA512

    8ccda6e4b9538229b998587054a644700776b337ada4c12d7aa901543b3df4d708586fd0d7a00e074a5601011f1222f1dd45a5e33f314d6f822e30d38e0b97b9

  • SSDEEP

    3072:RNwk1Q5z3QN3TV5m5Ju63FQo7fnEBctcp/+wreVism:ReYQ5zAN3TV5m5Ju63FF7fPtcsw6U1

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • dcf0fbea9b2e88d24dc4408db18566e77dc2487497aba7a7fa97861f5dc92b2aN
    .exe windows:1 windows x86 arch:x86

    26babd76bbb7f9c516a338b0601b4c9f


    Headers

    Imports

    Sections