General

  • Target

    6e9bc3b50c3b3e353baf8bc03d0869bb05bf67da72e884b432102ffb3182d24dN

  • Size

    101KB

  • MD5

    7b126a1786aa8db103a6d0536b0be0d0

  • SHA1

    dbcc271e24516cf5d56d32aa337d5c32c25a3d1c

  • SHA256

    6e9bc3b50c3b3e353baf8bc03d0869bb05bf67da72e884b432102ffb3182d24d

  • SHA512

    9bea1604cb3b48db34ada43bd65e20d2806507ec92f5ffca782054b4b57f10f48b3b2b2a4db5e3489e22ce52029584aec6b67241557e4459520edd26c0baf2d8

  • SSDEEP

    1536:qp7kwVsLczFPfZzR/hRtFzXtuXqbyNXrg0sZS7qlDABU8B9HYcJvDX:qplVfpFduXqbyu0sY7q5AnrHY4vDX

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://tat-neftbank.ru/kkq.php

http://tat-neftbank.ru/wcmd.htm

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 6e9bc3b50c3b3e353baf8bc03d0869bb05bf67da72e884b432102ffb3182d24dN
    .exe windows:1 windows x86 arch:x86

    95e6f8741083e0c7d9a63d45e2472360


    Headers

    Imports

    Sections