General

  • Target

    32dc96a5d876a40c30b3f510d37e749602ac7ddf3f221129449fe79352c11218

  • Size

    378KB

  • MD5

    ae7c5ee7e665fb2e6f8420630f0a6efc

  • SHA1

    3e332bf16054e1ac5e2438f069befc1962224b72

  • SHA256

    32dc96a5d876a40c30b3f510d37e749602ac7ddf3f221129449fe79352c11218

  • SHA512

    da47b31de6f23cec810e52192bc33c7374ae8e14d69cecd9eddfe8ecef697fe859809ae2e6176fa710fd4330e681b5328726436cb87a6a5900a99cc0f2eebe47

  • SSDEEP

    6144:u5aSpwEheYr75lHzpaF2e6UK+42GTQMJSZO5f7M0rx7/hP66qve6UK+42GTQMJSi:u5p1heYr75lTefkY660fIaDZkY660f28

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 32dc96a5d876a40c30b3f510d37e749602ac7ddf3f221129449fe79352c11218
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections