Overview

overview

10

Static

static

10

de94c9f436...fN.exe

windows7-x64

10

de94c9f436...fN.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    de94c9f43634e537490fc8541e2c13b78083b88b12bcc585c38796f67eb5702fN

  • Size

    182KB

  • MD5

    7c396225fe478238be5501649357bb90

  • SHA1

    f2b44cfaf676e78bdd53ecea87ad751c2e4b0887

  • SHA256

    de94c9f43634e537490fc8541e2c13b78083b88b12bcc585c38796f67eb5702f

  • SHA512

    d18dfa6f40bf210aba426d7fa1c0a5a33961136f6d5d87b9a5352b61630bd7ab6475cd5f96a72aca26bd7bbb3b85bbafc39dba10ebd0825b226a1fd39e1f27c9

  • SSDEEP

    3072:YXrU1IKRD51uT24ho1mtye3lFDrFDHZtOga24ho1mtye3l:N1DdEYsFj5tT3sF

Score
10/10
berbew

Malware Config

Extracted

Family

berbew

C2

http://tat-neftbank.ru/kkq.php

http://tat-neftbank.ru/wcmd.htm

Signatures

  • Berbew family
    berbew
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • de94c9f43634e537490fc8541e2c13b78083b88b12bcc585c38796f67eb5702fN
    .exe windows:1 windows x86 arch:x86

    95e6f8741083e0c7d9a63d45e2472360


    Headers

    Imports

    Sections