General

  • Target

    3b187a1ef8611e8a7da72a604d2b539615de0525547948c57398b9b2532b0d2fN

  • Size

    219KB

  • MD5

    a92b708f47f0421cc9c75dab0c1e0a00

  • SHA1

    58307b3ee7efce7856921be6da1067639885af46

  • SHA256

    3b187a1ef8611e8a7da72a604d2b539615de0525547948c57398b9b2532b0d2f

  • SHA512

    dc1af00618fdf53d1e01c3441e2bc1987e2d54c396e647c6d8199f474c41d2acb81f6875c17bf28d0782edc144477b725e735ccf1d33757c1d4960a9a2a1cefb

  • SSDEEP

    3072:0jnqnB75zA4BJPzwuZkO0aDb/IBPCOQvU6z314EXrjvwSfYrwBt:8YVBRzDOO0aDD4PCxdXXwSfYrwB

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://tat-neftbank.ru/kkq.php

http://tat-neftbank.ru/wcmd.htm

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3b187a1ef8611e8a7da72a604d2b539615de0525547948c57398b9b2532b0d2fN
    .exe windows:1 windows x86 arch:x86

    95e6f8741083e0c7d9a63d45e2472360


    Headers

    Imports

    Sections