Overview

overview

10

Static

static

10

ad67ad20b8...8N.exe

windows7-x64

10

ad67ad20b8...8N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ad67ad20b82f0f7f42996f019f8c1ef35ee0e04f78f99fd8816324614599f098N

  • Size

    237KB

  • MD5

    b935577476f508cf06eeb491a2d69050

  • SHA1

    d484fa1fad9b941f08e3ca553e2439004bd7504c

  • SHA256

    ad67ad20b82f0f7f42996f019f8c1ef35ee0e04f78f99fd8816324614599f098

  • SHA512

    daeaaaf2913a272e432c7f23fac2f9b812593e67ce5a2189241eb2cbe44c379ccef5e09aeb34096479d0edcb38707955d93cbde3ccda93a9a06ff0a6c5932d28

  • SSDEEP

    3072:84q3tDuAUbj8Nq75Sq4iqnAUUjE02ZoL9snKKq:ihuXj8U5ihYjEToZY8

Score
10/10
berbew

Malware Config

Extracted

Family

berbew

C2

http://tat-neftbank.ru/kkq.php

http://tat-neftbank.ru/wcmd.htm

Signatures

  • Berbew family
    berbew
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ad67ad20b82f0f7f42996f019f8c1ef35ee0e04f78f99fd8816324614599f098N
    .exe windows:1 windows x86 arch:x86

    95e6f8741083e0c7d9a63d45e2472360


    Headers

    Imports

    Sections