General

  • Target

    f0115af78827a8ec16ff151a01c48667663cdd693e6afb7298567fa77e6f4afdN

  • Size

    194KB

  • MD5

    e2a61c2d26652e1ba4093da1fd26c3a0

  • SHA1

    5ab630d78db9ee316fb389b6acdd9fc26e8bb39e

  • SHA256

    f0115af78827a8ec16ff151a01c48667663cdd693e6afb7298567fa77e6f4afd

  • SHA512

    89616f51a82dac1e022879c104548850469328a4f86ae5f2e50bbc94c2cdfa8f300ab40ddd036a58678943756bae5a4ceaab882b27faef049bfe58f75c7c0172

  • SSDEEP

    6144:IDZWSJPPH0xdSfUNRbCeKpNYxWlJ7mkD6pNY:+ZWSJPPH

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://tat-neftbank.ru/kkq.php

http://tat-neftbank.ru/wcmd.htm

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f0115af78827a8ec16ff151a01c48667663cdd693e6afb7298567fa77e6f4afdN
    .exe windows:1 windows x86 arch:x86

    95e6f8741083e0c7d9a63d45e2472360


    Headers

    Imports

    Sections