General

  • Target

    fe6b1234ec36f5008bb3f5b0dca6eb9629b6882b0bc8c4ca07874dcdfc52c69cN.exe

  • Size

    207KB

  • MD5

    ec4b448bd88af617f6396f6777ef5a40

  • SHA1

    848fdb331f85e9c5777bc0200bbc0c519ceed305

  • SHA256

    fe6b1234ec36f5008bb3f5b0dca6eb9629b6882b0bc8c4ca07874dcdfc52c69c

  • SHA512

    9cf58f3ce5a1717c0bcdbe10d10004cadae17f14ae919305b331660ff6a3d64290e1667b3434b8a9ed156b1c8829584b2230919d5b1278c69d287d935e9c8377

  • SSDEEP

    3072:L1lr4huqkXEVKMHiVjoSdoxx4KcWmjRrzyAyAtWgoJSWYVo2ASOvojoS:L154huHUVKCiVjj+VPj92d62ASOwj

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • fe6b1234ec36f5008bb3f5b0dca6eb9629b6882b0bc8c4ca07874dcdfc52c69cN.exe
    .exe windows:1 windows x86 arch:x86

    26babd76bbb7f9c516a338b0601b4c9f


    Headers

    Imports

    Sections