General

  • Target

    569b58ffa6c81cb577320e6ded3ff958639185042798e9cee159cea521e6adc7

  • Size

    391KB

  • MD5

    a1df1c989bdc3f27ada9fa7551d9ba31

  • SHA1

    38c1aef4dc5270ad5587db97522db6ff8e6bd081

  • SHA256

    569b58ffa6c81cb577320e6ded3ff958639185042798e9cee159cea521e6adc7

  • SHA512

    da6b3201c32acddbf06c4871dbe60cdc124add9e1e2b755f84298aa0a67a8a2b78dcf3c60b4b79e71645014c409919c3f38734ab5a1e42d82364f436848a52e1

  • SSDEEP

    6144:aAqWzotEt5aAfbAfNtTAfMAfFAfNPUmKyIxLfYeOO9UmKyIxLm:PMEXmNtuhUNP3cOK3D

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 569b58ffa6c81cb577320e6ded3ff958639185042798e9cee159cea521e6adc7
    .exe windows:1 windows x86 arch:x86

    26babd76bbb7f9c516a338b0601b4c9f


    Headers

    Imports

    Sections