General

  • Target

    234c7d4ee06662bdbc533e0833de220e7ef5a5ca39d9775269ea13050b2546a7N

  • Size

    176KB

  • MD5

    f096b33f15c5303f397c1c6718486070

  • SHA1

    72685cb0aa5f165c2a958bacbb33252f96a880e7

  • SHA256

    234c7d4ee06662bdbc533e0833de220e7ef5a5ca39d9775269ea13050b2546a7

  • SHA512

    0c19d178b802e62af00dc2a8a7b1b27fa520c020c5a9d4ab20f7735ad8ac2b2dd1a537890fc2646335ba8c4464ee0fe9e1d51405ac11090e29910927f87266e2

  • SSDEEP

    3072:j7DhM2222Ft1cjENRZ9wmAOIayGsOOJF4EISi/i4gG4npAjmA39QQIckJI:jq2222Ft1nTZ9EaUn4yjK99QQd

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://tat-neftbank.ru/kkq.php

http://tat-neftbank.ru/wcmd.htm

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 234c7d4ee06662bdbc533e0833de220e7ef5a5ca39d9775269ea13050b2546a7N
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections