General

  • Target

    42b4421f1d033b7264123dcecd389a59a83f171219c705eab14b7cf99e396b14N

  • Size

    161KB

  • MD5

    6c35e93dcd55d8e01a693e566721cd80

  • SHA1

    7b32d235dea8c073712740a012dabed889f8cd38

  • SHA256

    42b4421f1d033b7264123dcecd389a59a83f171219c705eab14b7cf99e396b14

  • SHA512

    3aa595b16b90a175f407166752ecf06a955b5440951e4b1f64ce4c2d8ace886f014e3bf11dd5fb769b5c736a442caa0cf171986a5a503f9a63830a20d00c69ab

  • SSDEEP

    3072:m1OrSv4hD3+kRVwtCJXeex7rrIRZK8K8/kv:mcrSAhukRVwtmeetrIyR

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 42b4421f1d033b7264123dcecd389a59a83f171219c705eab14b7cf99e396b14N
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections