General
-
Target
b5904751a331d6b682a6d8b97b420e93567130f8ac5668ec6b62568c06cb26bfN
-
Size
45KB
-
Sample
240930-hqdawa1fjr
-
MD5
24787b13e22e242cad5c747730403660
-
SHA1
a4548af4c678ffef5fbdd358c6d546a7606f29aa
-
SHA256
b5904751a331d6b682a6d8b97b420e93567130f8ac5668ec6b62568c06cb26bf
-
SHA512
68b729043cdab61e44ec2b301482b1962a4d3977ca277004fa523cdc2288891cf7264077d558efdaa3b4e6eedf1697ed394f29c30a9195799e7195669a07d621
-
SSDEEP
768:NSajMMACCGYhwfWjWEoirlQCDIKh6x4+z0Cy4B/1H5c:721wuZhvc26x4+z0CymK
Static task
static1
Behavioral task
behavioral1
Sample
b5904751a331d6b682a6d8b97b420e93567130f8ac5668ec6b62568c06cb26bfN.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
b5904751a331d6b682a6d8b97b420e93567130f8ac5668ec6b62568c06cb26bfN.exe
Resource
win10v2004-20240802-en
Malware Config
Extracted
berbew
http://tat-neftbank.ru/kkq.php
http://tat-neftbank.ru/wcmd.htm
Targets
-
-
Target
b5904751a331d6b682a6d8b97b420e93567130f8ac5668ec6b62568c06cb26bfN
-
Size
45KB
-
MD5
24787b13e22e242cad5c747730403660
-
SHA1
a4548af4c678ffef5fbdd358c6d546a7606f29aa
-
SHA256
b5904751a331d6b682a6d8b97b420e93567130f8ac5668ec6b62568c06cb26bf
-
SHA512
68b729043cdab61e44ec2b301482b1962a4d3977ca277004fa523cdc2288891cf7264077d558efdaa3b4e6eedf1697ed394f29c30a9195799e7195669a07d621
-
SSDEEP
768:NSajMMACCGYhwfWjWEoirlQCDIKh6x4+z0Cy4B/1H5c:721wuZhvc26x4+z0CymK
Score10/10-
Adds autorun key to be loaded by Explorer.exe on startup
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-