General

  • Target

    8dbc64e674fbc2a5d22b59af6a4c037ef7a39237de60f0282c54af0a77bef614N

  • Size

    101KB

  • MD5

    dca3af9b938af24cf2a1b7eda5a9c150

  • SHA1

    78f3b586a8c700ceff38029e774190ae6ea6b5bd

  • SHA256

    8dbc64e674fbc2a5d22b59af6a4c037ef7a39237de60f0282c54af0a77bef614

  • SHA512

    888afbab5754fed700612d186b63f75abea9768a119a3dcfe267376f6d95e67344cf232a2ce9b7cf198f4d5f00af432ec24c577570008b1e20958b61a3175560

  • SSDEEP

    3072:fcr5/cyKKPppzWwU8duXqbyu0sY7q5AnrHY4vDX:fcr5nKQptWwY853Anr44vDX

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://tat-neftbank.ru/kkq.php

http://tat-neftbank.ru/wcmd.htm

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 8dbc64e674fbc2a5d22b59af6a4c037ef7a39237de60f0282c54af0a77bef614N
    .exe windows:1 windows x86 arch:x86

    95e6f8741083e0c7d9a63d45e2472360


    Headers

    Imports

    Sections