General

  • Target

    0a0284745597e5d4959da513a230b32dd4c2dc61b2496388662e1aa5421d474a

  • Size

    169KB

  • MD5

    beacbb744b0a3c189c7d696fe4f11401

  • SHA1

    48f18c470ffaa9b7ba81c2c069f442b20d1ee846

  • SHA256

    0a0284745597e5d4959da513a230b32dd4c2dc61b2496388662e1aa5421d474a

  • SHA512

    3432e32b95612d68f1abc43f0aff4988f576e4d8bc4dc3e4ac519b6c559a6be2c4f90e6191ba7cd8b2b4601d495c88949ac13929717f2f948ef7ff5a0af40b28

  • SSDEEP

    3072:5DuS1ORCIYYKNPxMeEvPOdgujv6NLPfFFrKP92f65Ha:4S1SRYYKNJML3OdgawrFZKPf9

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0a0284745597e5d4959da513a230b32dd4c2dc61b2496388662e1aa5421d474a
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections