General

  • Target

    56af7ee8041b1ca97ae441b3d2ce9ca582750275fe42a2410b3db0a2eaf4e603N.exe

  • Size

    256KB

  • MD5

    ef04b4a474defc1860a547bd6802a300

  • SHA1

    7bf8a8be0aaa42ec17e71d7fb854a80eeaffe92a

  • SHA256

    56af7ee8041b1ca97ae441b3d2ce9ca582750275fe42a2410b3db0a2eaf4e603

  • SHA512

    ba88427c8a74661f134fa9fdc79124c58fc70f6808b4de7a6441e569003ee0f7c20a052c1e43ea144d8c61521a79b043cb88d6400e7fdf20e84334c2ca6f47d8

  • SSDEEP

    3072:+72InnyWZn6qcBqKTpP2agpvQ1UkY1UkVHe1rUtst76UtoUtFVgtRQ2c+j:+72if4p+agpI1PY1PRe19V+j

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 56af7ee8041b1ca97ae441b3d2ce9ca582750275fe42a2410b3db0a2eaf4e603N.exe
    .exe windows:1 windows x86 arch:x86

    26babd76bbb7f9c516a338b0601b4c9f


    Headers

    Imports

    Sections