General

  • Target

    7008ff7ee17ad25ba3d1bd6a9072858dc4f253fb5fa3c900d1d8cf48d051d838N

  • Size

    101KB

  • MD5

    e3aea697143b1e4de600c638b255f600

  • SHA1

    9b373d3eb70085c392e76a76cb26b5564780d55f

  • SHA256

    7008ff7ee17ad25ba3d1bd6a9072858dc4f253fb5fa3c900d1d8cf48d051d838

  • SHA512

    2e62cb07e3e2d6e7c846a67c899231499077bf6bc93fe20ae1bd5df16b6dd08db29cb5318e8de8abc0d1f4dc89cbdf29590faee9c44adf9a1bf53e6459bb5aeb

  • SSDEEP

    3072:tUpsRHAWal5duXqbyu0sY7q5AnrHY4vDX:tZXYO853Anr44vDX

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://tat-neftbank.ru/kkq.php

http://tat-neftbank.ru/wcmd.htm

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 7008ff7ee17ad25ba3d1bd6a9072858dc4f253fb5fa3c900d1d8cf48d051d838N
    .exe windows:1 windows x86 arch:x86

    95e6f8741083e0c7d9a63d45e2472360


    Headers

    Imports

    Sections