General

  • Target

    8d560d47aad4859bb8bf3c06843d1a6ef2075b9014947f4ad9299037bee6b2a2N

  • Size

    101KB

  • MD5

    fafb3e92ff8bba04aa7cc62286952a20

  • SHA1

    94dfeaf90847714928263fdb512d695903dffabf

  • SHA256

    8d560d47aad4859bb8bf3c06843d1a6ef2075b9014947f4ad9299037bee6b2a2

  • SHA512

    b93ec9bd7ab0475f158e635b843004c02192dffea8a9a189e80511c5a5f91bf95563ed37d05688a957c111c6b3c51cdce6ea7f689865531d48539d6b9d93b0d8

  • SSDEEP

    3072:3UcFQUgsIQvvHbdswjLduXqbyu0sY7q5AnrHY4vDX:vgI7XQ853Anr44vDX

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://tat-neftbank.ru/kkq.php

http://tat-neftbank.ru/wcmd.htm

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 8d560d47aad4859bb8bf3c06843d1a6ef2075b9014947f4ad9299037bee6b2a2N
    .exe windows:1 windows x86 arch:x86

    95e6f8741083e0c7d9a63d45e2472360


    Headers

    Imports

    Sections