Overview

overview

10

Static

static

10

94a08fcd41...89.exe

windows7-x64

10

94a08fcd41...89.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    94a08fcd41ba420fc703db0b275d400ec69d74fda2aa5259bf59b15cc91abd89

  • Size

    250KB

  • MD5

    99ca373dd34a526343ffd1c599f93aaf

  • SHA1

    e046eff4b1f8a192387ae717ba6e5a1d770234d2

  • SHA256

    94a08fcd41ba420fc703db0b275d400ec69d74fda2aa5259bf59b15cc91abd89

  • SHA512

    4265b4aa92a445e873cb4648708ec1b4ff169f16ff173f0d5e69059e40dfe0c47bc3f0533dbe60b86aeee11a211c0cfbe08c714da5b841c92803dc14174e35f8

  • SSDEEP

    6144:uyctMkvCvfmZ7KRRRGBCvfmZ7KFpNlJTBCvfmZ7d:uyyu

Score
10/10
berbew

Malware Config

Extracted

Family

berbew

C2

http://tat-neftbank.ru/kkq.php

http://tat-neftbank.ru/wcmd.htm

Signatures

  • Berbew family
    berbew
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 94a08fcd41ba420fc703db0b275d400ec69d74fda2aa5259bf59b15cc91abd89
    .exe windows:1 windows x86 arch:x86

    95e6f8741083e0c7d9a63d45e2472360


    Headers

    Imports

    Sections