General

  • Target

    9a19fa0497091b975a5ab776166d7ea44711364bc7212fb752d85078fc4d6428N

  • Size

    237KB

  • MD5

    abc1f24265dd913ab7acca6c71b96250

  • SHA1

    ede904eeb446a19603971cdc7b300ae3152e2079

  • SHA256

    9a19fa0497091b975a5ab776166d7ea44711364bc7212fb752d85078fc4d6428

  • SHA512

    82ab370e80a5d44390ccc150ccccbf0a8a77df2451995203b52417f6462649269d952015830268221fe1b36a18a7d3fda8fdd6217bf9d0d1fe81cfeb8defdbbb

  • SSDEEP

    3072:F2Xlvuvz5AUbj8Nq75Sq4iqnAUUjE02ZoL9snKKq:skvz5Xj8U5ihYjEToZY8

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://tat-neftbank.ru/kkq.php

http://tat-neftbank.ru/wcmd.htm

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 9a19fa0497091b975a5ab776166d7ea44711364bc7212fb752d85078fc4d6428N
    .exe windows:1 windows x86 arch:x86

    95e6f8741083e0c7d9a63d45e2472360


    Headers

    Imports

    Sections