General

  • Target

    167fe23443381b8ef3034fa512991e76ddf4776239ff49fe64a857aaf29c0e75

  • Size

    224KB

  • MD5

    b204eb562ab725cfe49f4db92d6ee6b5

  • SHA1

    6ffcbef6050a24a60df1bb0f555a4259dbd948ad

  • SHA256

    167fe23443381b8ef3034fa512991e76ddf4776239ff49fe64a857aaf29c0e75

  • SHA512

    1ba4fec505febb1f70bc45b6428322e611d04126e46b9b64efd891ad6365cd1e2b674aad6129bfb833a4cc1faec807b3f42e9bb2c58299ef94cd2081dc573f90

  • SSDEEP

    3072:Wcc+M4qde1tIuYUvIMDrFDHZtOgxBOXXwwfBoD6N3h8N5G2qVUDrFDHZtOgtSU:Wcc+MVe1r4s5tTDUZNSN58VU5tTtf

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://tat-neftbank.ru/kkq.php

http://tat-neftbank.ru/wcmd.htm

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 167fe23443381b8ef3034fa512991e76ddf4776239ff49fe64a857aaf29c0e75
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections