General

  • Target

    e371e3d909f1c98a21f19045d6a5407ec9e9b24acc9694d3e78715288c22ffb6N

  • Size

    264KB

  • MD5

    a6b07fbbcce6c07eb9830af94ef68280

  • SHA1

    6b0f719a73b29dd2d11a3eb3d4fdc272d7ef05d0

  • SHA256

    e371e3d909f1c98a21f19045d6a5407ec9e9b24acc9694d3e78715288c22ffb6

  • SHA512

    72ad6d5ae7dc03fb5fc2340dc4b5670e77645b14ca111ce29e50b34d3ff6a07b9f4add62c00890006d91a6e1d34ffef8483af845eee21f39e907f1063fd50e73

  • SSDEEP

    3072:HqHFcyb7c24ho1mtye3lFDrFDHZtO8jJkiUi8ChpBhx5Zd424ho1mtye3lFDrFDs:kFVb7xsFj5tPNki9HZd1sFj5tw

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://tat-neftbank.ru/kkq.php

http://tat-neftbank.ru/wcmd.htm

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • e371e3d909f1c98a21f19045d6a5407ec9e9b24acc9694d3e78715288c22ffb6N
    .exe windows:1 windows x86 arch:x86

    95e6f8741083e0c7d9a63d45e2472360


    Headers

    Imports

    Sections