General

  • Target

    27707cfdab46f9cbc3c9658cd8344f33f7b226cff9b56df29545c1e03851c621N

  • Size

    219KB

  • MD5

    e28b15abbace64b0c13de6b0d78c0cb0

  • SHA1

    5402567e8fee7cef7aefcd8b00f7de25260195c0

  • SHA256

    27707cfdab46f9cbc3c9658cd8344f33f7b226cff9b56df29545c1e03851c621

  • SHA512

    58e24fb233c776d4aa2c9e5eca6910e8c8ac1880a5a9f03d18b960c7109b666fa808a40e23f98283487a5b6f4beaa8c11c318f3ae175e6a43d97b9bb3f26798f

  • SSDEEP

    3072:CGjFpgcVYIGOPzwuZkO0aDb/IBPCOQvU6z314EXrjvwSfYrwBt:FjMYYIGszDOO0aDD4PCxdXXwSfYrwB

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://tat-neftbank.ru/kkq.php

http://tat-neftbank.ru/wcmd.htm

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 27707cfdab46f9cbc3c9658cd8344f33f7b226cff9b56df29545c1e03851c621N
    .exe windows:1 windows x86 arch:x86

    95e6f8741083e0c7d9a63d45e2472360


    Headers

    Imports

    Sections