General

  • Target

    d725b255938564aff2897fa9f34578b150bb934ecdbb001f4e0ab6443d15eb90

  • Size

    144KB

  • MD5

    ba35933de8cd3602730ccb6557d0448d

  • SHA1

    6cd2f3646f3d89d4f749b906842849b87c0fc710

  • SHA256

    d725b255938564aff2897fa9f34578b150bb934ecdbb001f4e0ab6443d15eb90

  • SHA512

    00c43e00c97b28dfa46d57887ee3f111204ed3b1a8294afe3c245bb2b865fcf40d2e2e548f817c0d3417af4250fa8d31c0e45e339cd3bd441e488752d3a4905a

  • SSDEEP

    3072:FWPW3puenzSviOuqufVgogHq/Wp+YmKfxgQdxv6:FYW3MenzSvj/ufVgoUmKyIxy

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d725b255938564aff2897fa9f34578b150bb934ecdbb001f4e0ab6443d15eb90
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections