General

  • Target

    d42a7df8d7cbf106a02a978a6be6bd8e5391c7d071dc0eb8d7a833e0ea0050ee

  • Size

    276KB

  • MD5

    b4c62071485583a3d90a6a298082ece0

  • SHA1

    8d31252fb02392d60fc7d5f0cf24c491958815f0

  • SHA256

    d42a7df8d7cbf106a02a978a6be6bd8e5391c7d071dc0eb8d7a833e0ea0050ee

  • SHA512

    e62a189f8aff0cd372a3683e7c328129e0b71dd543211d6d9bf2d347af4601b400076524f49d9c8834212e09239629de77f67a13b3d22c787cbfb3fb4a55675e

  • SSDEEP

    6144:YtIo6vblugdWZHEFJ7aWN1rtMsQBOSGaF+:GOn2HEGWN1RMs1S7

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d42a7df8d7cbf106a02a978a6be6bd8e5391c7d071dc0eb8d7a833e0ea0050ee
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections