General

  • Target

    611e4c021f294fb53c3eb5149d8d390529b33183d18b921be2dad9e108573911N

  • Size

    128KB

  • MD5

    8490f1ec03caa9ce01dcc952aa23e9a0

  • SHA1

    5fe499ce286e4c8cee08490a79735c5b8bbcffc0

  • SHA256

    611e4c021f294fb53c3eb5149d8d390529b33183d18b921be2dad9e108573911

  • SHA512

    d30ae5de66cee3bfee7abb3ebecb9d72e4a35367cbf660c602d035a77843d562f004c1ffd142bf20ae292990d8fba9f14302caa99000d03f7f55bd57152dd255

  • SSDEEP

    3072:j7b1MOGhGQmZfm+kte+MZmYm+DqVSLC617:zWphfmZfm+kte+MZmYm+DaG

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://tat-neftbank.ru/kkq.php

http://tat-neftbank.ru/wcmd.htm

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 611e4c021f294fb53c3eb5149d8d390529b33183d18b921be2dad9e108573911N
    .exe windows:1 windows x86 arch:x86

    95e6f8741083e0c7d9a63d45e2472360


    Headers

    Imports

    Sections