General

  • Target

    ba4eb9d6f5b2cb07c4fe35ce22ae37629606b708c7f54125c21616e37dc6cc67N

  • Size

    237KB

  • MD5

    b2ef26bd1978ab01c29ba1788c6f4080

  • SHA1

    cafd3df35ba775c2d92f8bf6d2103138bbd4bc38

  • SHA256

    ba4eb9d6f5b2cb07c4fe35ce22ae37629606b708c7f54125c21616e37dc6cc67

  • SHA512

    c0609a015e2c2e4b1790241505586c548bb1b19a1acb03ac8e90b98481c36a98be26519858dfab5f7f2137819ad9f7063604075967f55fb3dd7275fb97cdc9c5

  • SSDEEP

    3072:QsKF84U6ERAUbj8Nq75Sq4iqnAUUjE02ZoL9snKKq:QlKtRXj8U5ihYjEToZY8

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://tat-neftbank.ru/kkq.php

http://tat-neftbank.ru/wcmd.htm

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ba4eb9d6f5b2cb07c4fe35ce22ae37629606b708c7f54125c21616e37dc6cc67N
    .exe windows:1 windows x86 arch:x86

    95e6f8741083e0c7d9a63d45e2472360


    Headers

    Imports

    Sections