Overview

overview

10

Static

static

10

d9e50ac020...8N.exe

windows7-x64

10

d9e50ac020...8N.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    d9e50ac020641d043957e066e233f0ddae97d72f85ad5372e0d09900ebd94168N

  • Size

    237KB

  • MD5

    4805d625d24ac5e4d9b32e542d720ea0

  • SHA1

    f52f8ccc0cd5431386dbfe51cc418f8974469464

  • SHA256

    d9e50ac020641d043957e066e233f0ddae97d72f85ad5372e0d09900ebd94168

  • SHA512

    0f3e4c8215e3bd7a48f64fab76254f60493e4f01419e67a749f36e6fdb76c3f43cf2ee348981420c260a49391bc3cb8fafa7316248336e3cf084da4a9436f363

  • SSDEEP

    3072:AyrEc7Gc8AoKkhAUbj8Nq75Sq4iqnAUUjE02ZoL9snKKq:lrEWG3CkhXj8U5ihYjEToZY8

Score
10/10
berbew

Malware Config

Extracted

Family

berbew

C2

http://tat-neftbank.ru/kkq.php

http://tat-neftbank.ru/wcmd.htm

Signatures

  • Berbew family
    berbew
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d9e50ac020641d043957e066e233f0ddae97d72f85ad5372e0d09900ebd94168N
    .exe windows:1 windows x86 arch:x86

    95e6f8741083e0c7d9a63d45e2472360


    Headers

    Imports

    Sections