General

  • Target

    be41a822f3f669baf9d42589ccbe2db21adbf893248ec94c8cdce58459415662N.exe

  • Size

    240KB

  • MD5

    a38f4606f2da1422c9a34cababf6af50

  • SHA1

    0104177b2b857cc41b02f3c4edcfaeb04f2f9efd

  • SHA256

    be41a822f3f669baf9d42589ccbe2db21adbf893248ec94c8cdce58459415662

  • SHA512

    05ab5928602226224b1b94cb1ec9fa3111e0346cd296cceadacd8028b2f41199c70508f0b2f6a656b1fffef3078e0634e2c74eefb34f0a521f78ff151765cf0f

  • SSDEEP

    6144:Gfp3PpLTFRGyZ6YugQdjGG1wsKm6eBgdQbkoKTBEA:Gfp3Px7GyXu1jGG1wsGeBgRTGA

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • be41a822f3f669baf9d42589ccbe2db21adbf893248ec94c8cdce58459415662N.exe
    .exe windows:1 windows x86 arch:x86

    26babd76bbb7f9c516a338b0601b4c9f


    Headers

    Imports

    Sections