General

  • Target

    84763a7427e3eac02aa7f9701780d8a5b4bc34562c36b66e3ac4357ef66cbe33

  • Size

    194KB

  • MD5

    ca12fd6189ea49d3ce65da8b719d464c

  • SHA1

    085dd713e41adc63883d183a62b303b4ec909b91

  • SHA256

    84763a7427e3eac02aa7f9701780d8a5b4bc34562c36b66e3ac4357ef66cbe33

  • SHA512

    b4f1ad0628b2a828cad1389feee4879daece5811e4e3d9828a396c1f0bddf1a4dc5d8dc56f14990e3cdf7fc94869f96f86ead380b8c9ab5cf7d84cc83faf6886

  • SSDEEP

    3072:cqlbzg2Ma5vZV6vkmMIM/kEmMIGumMIc/1GV:cqlfIa5vZIk5/pbuh/UV

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://tat-neftbank.ru/kkq.php

http://tat-neftbank.ru/wcmd.htm

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 84763a7427e3eac02aa7f9701780d8a5b4bc34562c36b66e3ac4357ef66cbe33
    .exe windows:1 windows x86 arch:x86

    95e6f8741083e0c7d9a63d45e2472360


    Headers

    Imports

    Sections