General

  • Target

    a1a114cbe7463e67af71275beead0d59bf361783028637793fce9056953b9e66

  • Size

    302KB

  • MD5

    f63c523d3babf6cc0c120bf8ba277601

  • SHA1

    9c7f3427acc01b4bd3365b08d6356ab4b65f8f67

  • SHA256

    a1a114cbe7463e67af71275beead0d59bf361783028637793fce9056953b9e66

  • SHA512

    bc2986bbfaa7d11b5b95119386ecc921caa5c130c029aef1ea73a589d2ed9da38e191c58656b9d8d2dab1ea86d37531e059d3f652304148eb569a1a10d19cd65

  • SSDEEP

    6144:P9fdI3FF7fPtcsw6UJZqktbOUqCTGepXgbWH:P9e3FF7fFcsw6UJZqktbDqCTGepXgbWH

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a1a114cbe7463e67af71275beead0d59bf361783028637793fce9056953b9e66
    .exe windows:1 windows x86 arch:x86

    26babd76bbb7f9c516a338b0601b4c9f


    Headers

    Imports

    Sections