General

  • Target

    754e96a6c0ee9f9f6acbcc5b6fcce64a7224f78a63563081d8a61ecf3422c95cN

  • Size

    188KB

  • MD5

    b70bf06e4dcb4f4ec80c87d85ad29440

  • SHA1

    86c811784dc8e7efbb49ca34fee18c0cf5f8b339

  • SHA256

    754e96a6c0ee9f9f6acbcc5b6fcce64a7224f78a63563081d8a61ecf3422c95c

  • SHA512

    f6872b1f7bdf0edaaaea83c0ea10be52fb45f3d59649a7281344c218d4b9c4304c67898530a41b306e635f3ff31d0245f364597a0f47b11bc7fb16da634ff26f

  • SSDEEP

    3072:FuyS+JHVEw8Cz1ZYT7usluTXp6UF5wzec+tZOnU1/s5HH0AU/yRvS3u121Te:RSciQfYT6s21L7/s50z/Wa3/M

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://tat-neftbank.ru/kkq.php

http://tat-neftbank.ru/wcmd.htm

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 754e96a6c0ee9f9f6acbcc5b6fcce64a7224f78a63563081d8a61ecf3422c95cN
    .exe windows:1 windows x86 arch:x86

    95e6f8741083e0c7d9a63d45e2472360


    Headers

    Imports

    Sections