General

  • Target

    6c6f6358776a3c08e6325b958e3241a04313e31a43bc27eb9b0595e79c741dd6N

  • Size

    219KB

  • MD5

    f68bcea19e822155c57c3c0490255ee0

  • SHA1

    c1acac0b9053f13ee286a9f8b37b5fee90403d50

  • SHA256

    6c6f6358776a3c08e6325b958e3241a04313e31a43bc27eb9b0595e79c741dd6

  • SHA512

    e60625942f33019ebd27a28cf0e7ae0025bfa4e7d5c16f584d904f777ebee58a665bbbbf23fdaca612416611392016a335644551170ab3e73e47a4ff012efcb9

  • SSDEEP

    3072:VVTPP0tcYIhR6x5PPzwuZkO0aDb/IBPCOQvU6z314EXrjvwSfYrwBt:fZYIhW3zDOO0aDD4PCxdXXwSfYrwB

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://tat-neftbank.ru/kkq.php

http://tat-neftbank.ru/wcmd.htm

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 6c6f6358776a3c08e6325b958e3241a04313e31a43bc27eb9b0595e79c741dd6N
    .exe windows:1 windows x86 arch:x86

    95e6f8741083e0c7d9a63d45e2472360


    Headers

    Imports

    Sections