General

  • Target

    04f14ffc120e8d60480cf0fc7bf970520d2bdcef8a7093d2cb9d8848d9e0657b

  • Size

    305KB

  • MD5

    e1815049b7374630368ea0b836b25b61

  • SHA1

    90ee0a22d6eb4d20793a4157074e65e6c523ca7a

  • SHA256

    04f14ffc120e8d60480cf0fc7bf970520d2bdcef8a7093d2cb9d8848d9e0657b

  • SHA512

    95e4d964c1fa2247719e506488bd80dfd010f69718585e685de4278431fa56d6710ff0d43870d0955b8874d54d9484f34e1d884964acde83b9a59fc1708f1838

  • SSDEEP

    3072:ULOcWkxGzxxytHyZzr+lc802eS5pAgYIqGvJ6887lbyMGjXF1kqaholmtbCQVDbd:Ua7kxkqyZzClc85dZMGXF5ahdt3b0668

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 04f14ffc120e8d60480cf0fc7bf970520d2bdcef8a7093d2cb9d8848d9e0657b
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections