General

  • Target

    d8332b6b1cda3794e0922942dd80b03d03f2641e80b912604aeaa6fe461b4810N

  • Size

    188KB

  • MD5

    e9cb5a83db1957c94daca6f3f8f48ed0

  • SHA1

    5b3465409e9b7a447c9b94ee8ab5a5cc515076ac

  • SHA256

    d8332b6b1cda3794e0922942dd80b03d03f2641e80b912604aeaa6fe461b4810

  • SHA512

    afd3ccd348770790a822ea4cb837b337694fb45b55a2a26c2cbadefa316911b8497a409d71f95723eec502406a71377cdde928264b5c501c16fbf34b41b39171

  • SSDEEP

    3072:iF2ive8GqJC27usluTXp6UF5wzec+tZOnU1/s5HH0AU/yRvS3u121Te:i7myM26s21L7/s50z/Wa3/M

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://tat-neftbank.ru/kkq.php

http://tat-neftbank.ru/wcmd.htm

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d8332b6b1cda3794e0922942dd80b03d03f2641e80b912604aeaa6fe461b4810N
    .exe windows:1 windows x86 arch:x86

    95e6f8741083e0c7d9a63d45e2472360


    Headers

    Imports

    Sections