General

  • Target

    90c581db2413677b39bf081ed3f57bfd760671640f4596e00dad6a44b63d065eN

  • Size

    264KB

  • MD5

    9e70bc6c3091812556cb576e51964550

  • SHA1

    7fa34660e6715c470255f481d995b419277dd280

  • SHA256

    90c581db2413677b39bf081ed3f57bfd760671640f4596e00dad6a44b63d065e

  • SHA512

    ac805130c69c7503c5f285cf1f98c48d12ece4493b00d95ec59c42e3843ff433d358628436e3153d245ee6a2bd5f6715620b0b40a183f75ebe161c884a1bd5f0

  • SSDEEP

    3072:ltz020unRigbuFHC24ho1mtye3lFDrFDHZtO8jJkiUi8ChpBhx5Zd424ho1mtyeO:lt420uvbSPsFj5tPNki9HZd1sFj5tw

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://tat-neftbank.ru/kkq.php

http://tat-neftbank.ru/wcmd.htm

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 90c581db2413677b39bf081ed3f57bfd760671640f4596e00dad6a44b63d065eN
    .exe windows:1 windows x86 arch:x86

    95e6f8741083e0c7d9a63d45e2472360


    Headers

    Imports

    Sections