Overview

overview

10

Static

static

10

30b8c939ff...f3.exe

windows7-x64

10

30b8c939ff...f3.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    30b8c939ffaed51062d84a5bff2fc602f5f5668a81a8b22f4aaf1f644b1946f3

  • Size

    101KB

  • MD5

    db290442e682a047dde0159888d05ad6

  • SHA1

    d62d6bd345563758853765632b40a961927d4e52

  • SHA256

    30b8c939ffaed51062d84a5bff2fc602f5f5668a81a8b22f4aaf1f644b1946f3

  • SHA512

    201053dcf2350d94cbcea9e6a57c6857fcdbed89296f964c45ce5d883c3df627ddf33d0eddbdd7f5614495f744d33bb40e2275f925cefc5d06865b4669ca5792

  • SSDEEP

    3072:n5yq1CU5bdcZf+mCXduXqbyu0sY7q5AnrHY4vDX:AW3kB+mCE853Anr44vDX

Score
10/10
berbew

Malware Config

Extracted

Family

berbew

C2

http://tat-neftbank.ru/kkq.php

http://tat-neftbank.ru/wcmd.htm

Signatures

  • Berbew family
    berbew
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 30b8c939ffaed51062d84a5bff2fc602f5f5668a81a8b22f4aaf1f644b1946f3
    .exe windows:1 windows x86 arch:x86

    95e6f8741083e0c7d9a63d45e2472360


    Headers

    Imports

    Sections