General

  • Target

    ca2abf38cf9bb4de34cc6d30463be7368699b4acddf5e8592f0bc94c8d1a72f9N.exe

  • Size

    390KB

  • MD5

    e29997d2ef90a5016248f278ade7a0f0

  • SHA1

    2875c1cd19fa480c6e1dd6af00d04be0a014ed5a

  • SHA256

    ca2abf38cf9bb4de34cc6d30463be7368699b4acddf5e8592f0bc94c8d1a72f9

  • SHA512

    0299ab6f9265b9b042b948c36336f6a79c2c4a245acafc4ad7792f3ef124c484c1748bbbc5398af7220197f7713a88d932ef9189c4424f2b5bbf7f1721a912e0

  • SSDEEP

    6144:08J5WyRn27SLiKH66b+X0RjtdgOPAUvgkNRgdgOPAUvgkG:085WKnKSLYUngEiM2gEif

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ca2abf38cf9bb4de34cc6d30463be7368699b4acddf5e8592f0bc94c8d1a72f9N.exe
    .exe windows:1 windows x86 arch:x86

    26babd76bbb7f9c516a338b0601b4c9f


    Headers

    Imports

    Sections