General

  • Target

    f02fca32c5d7124365fdce4a3f02d526eaaae71a6ee9f612a4fcb164fe7f7a3b

  • Size

    229KB

  • MD5

    8f9c2ecaf3743ac36933c60e5285719d

  • SHA1

    c29d47e72938fc413c5b2c2cbe2ecc28ac1a7c09

  • SHA256

    f02fca32c5d7124365fdce4a3f02d526eaaae71a6ee9f612a4fcb164fe7f7a3b

  • SHA512

    d517b4bbd0c7c44b7054bd8d4da91105c1e6ff6d459e225777ec73b606825db7d885960f83eaeefc4445d6f2de91bcc1076c6c491583c68b913c5dae81a2fa73

  • SSDEEP

    6144:24lwdhJ271+HZ/pvkym/89bYEwPhCKvav:Blb7AIfFfvav

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f02fca32c5d7124365fdce4a3f02d526eaaae71a6ee9f612a4fcb164fe7f7a3b
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections