General

  • Target

    6965314235741d4e3cc492192f84ab5234344e0d81a4a81c39392a1383a84336N

  • Size

    182KB

  • MD5

    cf960a43f2c44a6bd694e1f25981dc90

  • SHA1

    f816221b6a42a4026dfb1dc6779afe806302d248

  • SHA256

    6965314235741d4e3cc492192f84ab5234344e0d81a4a81c39392a1383a84336

  • SHA512

    3cc99231ea8a100edcca69130c16f40661c90d060d293026d0d2cefb7b0ca3fb287b505fe02e742f272bbfa137248f91272fd84eec96ba27dfd89124bafe9030

  • SSDEEP

    3072:UU8DRywZTX5o24ho1mtye3lFDrFDHZtOga24ho1mtye3l:UfDAMTplsFj5tT3sF

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://tat-neftbank.ru/kkq.php

http://tat-neftbank.ru/wcmd.htm

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 6965314235741d4e3cc492192f84ab5234344e0d81a4a81c39392a1383a84336N
    .exe windows:1 windows x86 arch:x86

    95e6f8741083e0c7d9a63d45e2472360


    Headers

    Imports

    Sections