General

  • Target

    a24f22fd098cac0c99b2ff6be2185d76f2d4988e1b6090b04f32124fb53fcd88.exe

  • Size

    187KB

  • MD5

    f85a527aec80f9699b649faa4e24cf87

  • SHA1

    b09e8c3ed6db0f38702ec901de4951ff15a815da

  • SHA256

    a24f22fd098cac0c99b2ff6be2185d76f2d4988e1b6090b04f32124fb53fcd88

  • SHA512

    484d186ca84ac4e79f6f8851bf98f492830543372a1d609e67420a98f706cecd40da181c81d3641e7e11af318e2684cc95f0392ac7670994b3c94faabe49ce45

  • SSDEEP

    3072:mkPhYXpksja+k5a/rVgtRQ2c+tlB5xpWJLM77OkeCK2+hDueHm:mQqpksG/qrV+tbFOLM77OLLtG

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a24f22fd098cac0c99b2ff6be2185d76f2d4988e1b6090b04f32124fb53fcd88.exe
    .exe windows:1 windows x86 arch:x86

    26babd76bbb7f9c516a338b0601b4c9f


    Headers

    Imports

    Sections