General

  • Target

    9156c64b1b8abe6784dbeefeff21c57c4d5c03cd34fb43688b26fe3b4d653880N

  • Size

    182KB

  • MD5

    6e4a709f031d07d1ea940b8efc2cd210

  • SHA1

    ca55d1461e6f0c1147d74de85c08beac7c3cfa55

  • SHA256

    9156c64b1b8abe6784dbeefeff21c57c4d5c03cd34fb43688b26fe3b4d653880

  • SHA512

    b0e77ad7c2e86f12aff3cdfa7845c27891108e496d24490c66712aacb55458f8a42158e02cef637bea652a18fbd4c0c715f6fbc391f42e036a8cf4844438290b

  • SSDEEP

    3072:96QYVNjw2gzp1Bnh8Vr5XzVOvrT//hUJ2gzp1Bnh8Vr5:8wv5OlXzQMv5Ol

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://tat-neftbank.ru/kkq.php

http://tat-neftbank.ru/wcmd.htm

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 9156c64b1b8abe6784dbeefeff21c57c4d5c03cd34fb43688b26fe3b4d653880N
    .exe windows:1 windows x86 arch:x86

    95e6f8741083e0c7d9a63d45e2472360


    Headers

    Imports

    Sections