General

  • Target

    44cae80a67b41309747ce608d6e6bd1ebd59a60da7723ad2b3e3befdc9f94ac7N

  • Size

    115KB

  • MD5

    a258d712718de3888af4b2e951f9eee0

  • SHA1

    62ed73fac9c326e7a3f39c697c7a8a61dd333ccf

  • SHA256

    44cae80a67b41309747ce608d6e6bd1ebd59a60da7723ad2b3e3befdc9f94ac7

  • SHA512

    2da062ecf30d862b7f83bf0206d3ef004cc27e4c4b543c3f47e1343bf24ea419e8a6fa54a5bdea99a730e9b301a9c53072dd0c7e6f17c26596ec1ccda63ba539

  • SSDEEP

    3072:Y6uGzni5h4X7FW2VTbWymWU6SMQehalNgFuk0:Y6LHX7f6ymWU5MClN5

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://tat-neftbank.ru/kkq.php

http://tat-neftbank.ru/wcmd.htm

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 44cae80a67b41309747ce608d6e6bd1ebd59a60da7723ad2b3e3befdc9f94ac7N
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections