General

  • Target

    bbc8cce43ab823b2ce14fc2580f4155e2577e0644fcdb368558051633106cf9d

  • Size

    181KB

  • MD5

    f12660678d1b4a74678c23b673d65a31

  • SHA1

    facc925109d30e624a179455fe0a98c01e4eee59

  • SHA256

    bbc8cce43ab823b2ce14fc2580f4155e2577e0644fcdb368558051633106cf9d

  • SHA512

    154addac3f3d972b8632a987f4474c4e9109be7995e9f6d6c914c2553be946f1fbebae2f9753293861ae6a87951092fe2c2f65f35eecca91bdc3cc6d59a95750

  • SSDEEP

    3072:LFHpMHlI6aXVDtDrFDHZtOgxadeMZCTgDrFDHZtOg:pH+la9L5tToZM45tT

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://tat-neftbank.ru/kkq.php

http://tat-neftbank.ru/wcmd.htm

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • bbc8cce43ab823b2ce14fc2580f4155e2577e0644fcdb368558051633106cf9d
    .exe windows:1 windows x86 arch:x86

    95e6f8741083e0c7d9a63d45e2472360


    Headers

    Imports

    Sections