General

  • Target

    424a7224f54dd0e425776fa53dabaccb96d135291095041f42e5561104930087

  • Size

    305KB

  • MD5

    ef39f114e76f086fd5293b0b2fc89ad1

  • SHA1

    c77a5fc80a4382964ef3f6784081eff1951f1277

  • SHA256

    424a7224f54dd0e425776fa53dabaccb96d135291095041f42e5561104930087

  • SHA512

    22bedfe2d7de26368f1694f0b100f60f6b2b592b8545198a5ca11ee22ae158dc97b0ad5c3c77969cde0b59b526b86ecdf241ab5eed0c179e76fd7ef48c4b3314

  • SSDEEP

    6144:082Ro1g3IsddypUlc85dZMGXF5ahdt3b0668:r2RnxLXFWtQ668

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 424a7224f54dd0e425776fa53dabaccb96d135291095041f42e5561104930087
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections