Overview

overview

10

Static

static

10

11397d83b9...ef.exe

windows7-x64

10

11397d83b9...ef.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    11397d83b974474b1e17985777754984566d8ce040a412788578ce398ffe7bef

  • Size

    128KB

  • MD5

    c3104d27e37b000f8a822238e3b2b792

  • SHA1

    dd659cebe26e0b147e5ff482afb838e6e219f7e2

  • SHA256

    11397d83b974474b1e17985777754984566d8ce040a412788578ce398ffe7bef

  • SHA512

    83a1395d8168c5ff9b3a318ede3f905b604f63e7d976b1a6c9063f71d032181ed72da23614fdf8c539b57798e358bde260b71c9a85687cfc254483d7c4bd278d

  • SSDEEP

    3072:p+EmPb8eiXMESfuKG7UDd0pCrQIFdFtLQ:0EWgSLG7Ux0ocIPF9Q

Score
10/10
berbew

Malware Config

Extracted

Family

berbew

C2

http://tat-neftbank.ru/kkq.php

http://tat-neftbank.ru/wcmd.htm

Signatures

  • Berbew family
    berbew
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 11397d83b974474b1e17985777754984566d8ce040a412788578ce398ffe7bef
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections