General

  • Target

    28cbde65b12bc07b543ae6609255e85aa60c4b4bbb15dff9e9cbe5e1b586b4d7N

  • Size

    101KB

  • MD5

    0e7cef9eadc59c19946053d3fba068f0

  • SHA1

    3adb9b110c0a51ccad8136c860498355bb9e1f46

  • SHA256

    28cbde65b12bc07b543ae6609255e85aa60c4b4bbb15dff9e9cbe5e1b586b4d7

  • SHA512

    0bf7ddfb027390170a7c77a84709a436bf7c401c617f5817d9478fec3cd4a04a72750f67085297680d6c65b805d0984558c9364a78c15cd1dd1f4174db108a5f

  • SSDEEP

    3072:FBOkVQtkZlHyduXqbyu0sY7q5AnrHY4vDX:Xb5853Anr44vDX

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://tat-neftbank.ru/kkq.php

http://tat-neftbank.ru/wcmd.htm

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 28cbde65b12bc07b543ae6609255e85aa60c4b4bbb15dff9e9cbe5e1b586b4d7N
    .exe windows:1 windows x86 arch:x86

    95e6f8741083e0c7d9a63d45e2472360


    Headers

    Imports

    Sections