General

  • Target

    14a96477d38924783f64e06ec7a8226fe263cf757f6c8f5afce75a87c9b26c60N

  • Size

    264KB

  • MD5

    ef163665993f323a271886dbb4188ed0

  • SHA1

    2691701742168b46f6fd744a9a24aa7de33ed64e

  • SHA256

    14a96477d38924783f64e06ec7a8226fe263cf757f6c8f5afce75a87c9b26c60

  • SHA512

    9b179d8496c96aed5eee49339a94ac91cfdebcc5d16d4f1fa8b59fa0964c00a7362d6b2101d53ec10cc7ca30721b38e6b2cf8857eb8e658ed983813916aeea85

  • SSDEEP

    3072:NlDaSHMHaHsJA3koh24ho1mtye3lFDrFDHZtO8jJkiUi8ChpBhx5Zd424ho1mtyF:NhnHMdJA3koOsFj5tPNki9HZd1sFj5tw

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://tat-neftbank.ru/kkq.php

http://tat-neftbank.ru/wcmd.htm

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 14a96477d38924783f64e06ec7a8226fe263cf757f6c8f5afce75a87c9b26c60N
    .exe windows:1 windows x86 arch:x86

    95e6f8741083e0c7d9a63d45e2472360


    Headers

    Imports

    Sections