General

  • Target

    8ebc016e60c314b811ce5c2f99227e314a48058decbdf82d94a0274a69e92d17N

  • Size

    128KB

  • MD5

    0f6886d071e2623d7141198c181cd330

  • SHA1

    3e3f8866fb04f3a2ed27931f0060088826073eaa

  • SHA256

    8ebc016e60c314b811ce5c2f99227e314a48058decbdf82d94a0274a69e92d17

  • SHA512

    1875c400ffb7da12e67ce7239f55d63c55e901917d989c95ebcf5bb868245dbffd80d444d4d3cb12ae104829c0a24fbe03e755d8a069caee677e3198c9333e71

  • SSDEEP

    3072:DTILdB48U7aQFOYkQmZfm+kte+MZmYm+DqVSLC617:nIA77LFmZfm+kte+MZmYm+DaG

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://tat-neftbank.ru/kkq.php

http://tat-neftbank.ru/wcmd.htm

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 8ebc016e60c314b811ce5c2f99227e314a48058decbdf82d94a0274a69e92d17N
    .exe windows:1 windows x86 arch:x86

    95e6f8741083e0c7d9a63d45e2472360


    Headers

    Imports

    Sections