General

  • Target

    4d2e90f66c6e2be10a7dfcde031ebe878fa9b7e5bbe0c220b3c62d89b972f442N

  • Size

    188KB

  • MD5

    668f5c00b101b4100121caa87c699090

  • SHA1

    4025b560892d3a33eaa814f286f456ecdf71000d

  • SHA256

    4d2e90f66c6e2be10a7dfcde031ebe878fa9b7e5bbe0c220b3c62d89b972f442

  • SHA512

    3eb0b9875678544aafb8fe630f4e9ca2051cdd9f41d9a60e40c4294aa9df825960fadd3ac9a683fe57f44bfef3ea4910b6b9a8a0bb9071480bb7261f7c90566b

  • SSDEEP

    3072:8puSxBdEnIVIXd7usluTXp6UF5wzec+tZOnU1/s5HH0AU/yRvS3u121Te:8sSBundXd6s21L7/s50z/Wa3/M

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://tat-neftbank.ru/kkq.php

http://tat-neftbank.ru/wcmd.htm

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4d2e90f66c6e2be10a7dfcde031ebe878fa9b7e5bbe0c220b3c62d89b972f442N
    .exe windows:1 windows x86 arch:x86

    95e6f8741083e0c7d9a63d45e2472360


    Headers

    Imports

    Sections