General

  • Target

    9f33a5b1f733044d92e30757516597f7563d4ad086a124f568bd384569d67eb8N.exe

  • Size

    182KB

  • MD5

    cdfbcad503f48e554927a8df18a2e810

  • SHA1

    7f009ca81c9b92068c0b9719d2d509d9adbb15a1

  • SHA256

    9f33a5b1f733044d92e30757516597f7563d4ad086a124f568bd384569d67eb8

  • SHA512

    3e2e485cbea64d8661cded405d0f30db61e5f4df6c840c58c38ab2d686ef136f1f5ec565863e24861e4d80a641f8db6f754780a8828cf6d755f8ae33924d4759

  • SSDEEP

    3072:v6/sLdXkK5wFdFdUdFdFdedededzqZ724ho1mtye3lFDrFDHZtOga24ho1mtye3l:CsL6Yw1qZwsFj5tT3sF

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://tat-neftbank.ru/kkq.php

http://tat-neftbank.ru/wcmd.htm

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 9f33a5b1f733044d92e30757516597f7563d4ad086a124f568bd384569d67eb8N.exe
    .exe windows:1 windows x86 arch:x86

    95e6f8741083e0c7d9a63d45e2472360


    Headers

    Imports

    Sections