General

  • Target

    ff05ea7d2a9c09f5e8a005c2f9bfa3b4ba87b271e3bffd920c36ffc6e4d49c13N

  • Size

    182KB

  • MD5

    0ee76329f57d8537dc6e55afa6223490

  • SHA1

    c89dabf42cc2fdd437131f775da8a8e3e5e51f52

  • SHA256

    ff05ea7d2a9c09f5e8a005c2f9bfa3b4ba87b271e3bffd920c36ffc6e4d49c13

  • SHA512

    c97e896cf7bd79d62947bc1c26408322fd99ab4bc82010b4a4349966988bce23dc0d01e6ae167d5967eba90291e490dcfb821fa5c2ecdcb16b44eb2d92daa37c

  • SSDEEP

    3072:JtMHPKg5qgsEO394EylLBsLnVUUHyNwtN4/nEBlMdQ94V5AlL/x5RlUlLBsLnVUW:bMHP43/7UUHyN4lMdQ94vAlL/x3l5UUZ

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://tat-neftbank.ru/kkq.php

http://tat-neftbank.ru/wcmd.htm

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ff05ea7d2a9c09f5e8a005c2f9bfa3b4ba87b271e3bffd920c36ffc6e4d49c13N
    .exe windows:1 windows x86 arch:x86

    95e6f8741083e0c7d9a63d45e2472360


    Headers

    Imports

    Sections