General

  • Target

    c668bbe815de315b03ab2d1d366b05befdf7cb767a2cc8116d8604e80e1f611a

  • Size

    128KB

  • MD5

    6991292751fbcf805a9a949d452f3a91

  • SHA1

    901d7689460a736743976df9468baf5ce2820977

  • SHA256

    c668bbe815de315b03ab2d1d366b05befdf7cb767a2cc8116d8604e80e1f611a

  • SHA512

    807284de18a84286969f04dc99c92301a379cef9b08b7799a91da9eeb26987ec2ed7e630830e909379ce2368449b37551534499693ab007a7d15307cf178aa78

  • SSDEEP

    3072:FxQ5Klk4DKzMODrFDHZtOgxBOXXwwfBoD6N3h8N5Gg:XdGzM+5tTDUZNSN57

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://tat-neftbank.ru/kkq.php

http://tat-neftbank.ru/wcmd.htm

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c668bbe815de315b03ab2d1d366b05befdf7cb767a2cc8116d8604e80e1f611a
    .exe windows:1 windows x86 arch:x86

    95e6f8741083e0c7d9a63d45e2472360


    Headers

    Imports

    Sections