General

  • Target

    56504d224049a20ea539e14558f0599efc83fa1cfa761b608fcf9322deb4bef1N

  • Size

    187KB

  • MD5

    5d7a631e95df5acac2e851f2e05caba0

  • SHA1

    2bd35538a494d339589e5a502bc06ffb89299b07

  • SHA256

    56504d224049a20ea539e14558f0599efc83fa1cfa761b608fcf9322deb4bef1

  • SHA512

    d295822c42badf0fb1c5b665958863d72bcfd86b4ef31251a74b306d049b654fc988ef0c18109524af83b62e3629289297b3d53e60cfed0dea3519215f262e37

  • SSDEEP

    3072:Wxk1Jxff1ueTmBdruoP+VdQhWkVyVgtRQ2c+tlB5xpWJLM77OkeCK2+hDueH:dvxff1u/K2NRVyV+tbFOLM77OLLt

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 56504d224049a20ea539e14558f0599efc83fa1cfa761b608fcf9322deb4bef1N
    .exe windows:1 windows x86 arch:x86

    26babd76bbb7f9c516a338b0601b4c9f


    Headers

    Imports

    Sections