General

  • Target

    619a7a9890d10497f1dc42bbf46660a4a5023836dbf129a840c56ffa95521f37N

  • Size

    194KB

  • MD5

    1194897ea3264999e351b5ef9accae00

  • SHA1

    fc2548eae95c3f30f6bdddc135e714892742eee7

  • SHA256

    619a7a9890d10497f1dc42bbf46660a4a5023836dbf129a840c56ffa95521f37

  • SHA512

    cb341c1cb4bbbe4e4e9a55c44530b81f01c672a739b830c7014b404178a086ce0341e324ccd559bf363ab947414da03cc03d66790561c000d18db999bfc8815c

  • SSDEEP

    3072:74Dib9XBHXYVjyGUAmMIM/kEmMIGumMIc/1GV:744RHoVefA5/pbuh/UV

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://tat-neftbank.ru/kkq.php

http://tat-neftbank.ru/wcmd.htm

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 619a7a9890d10497f1dc42bbf46660a4a5023836dbf129a840c56ffa95521f37N
    .exe windows:1 windows x86 arch:x86

    95e6f8741083e0c7d9a63d45e2472360


    Headers

    Imports

    Sections