General

  • Target

    1b2721b0b700b38bca0382b29616a43d6cd72cf7f0130359f453a49dab894336N

  • Size

    101KB

  • MD5

    125e0ecc9ca74934dac7173a288892c0

  • SHA1

    d244646640f0ddd0f017d7ba234c05fbbff3d955

  • SHA256

    1b2721b0b700b38bca0382b29616a43d6cd72cf7f0130359f453a49dab894336

  • SHA512

    b7de3b284bc3205f96fb4061e44569c84132285f8c4ba96c7c11ed654a3e80be1456dba40cf49eb9781bc0e3ce8c874c99a69273e5269f1383696ef0bc249158

  • SSDEEP

    3072:nfg7BJ9Bk4LqCDkGDUfYduXqbyu0sY7q5AnrHY4vDX:f0qCDNUff853Anr44vDX

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://tat-neftbank.ru/kkq.php

http://tat-neftbank.ru/wcmd.htm

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1b2721b0b700b38bca0382b29616a43d6cd72cf7f0130359f453a49dab894336N
    .exe windows:1 windows x86 arch:x86

    95e6f8741083e0c7d9a63d45e2472360


    Headers

    Imports

    Sections