General

  • Target

    2b80a3cb4517e0a89d8b41806d3d9f04514106b8a305c213b5f081e413ba2cf3N

  • Size

    264KB

  • MD5

    0e2e0cd96075ff6b5959a498559c1670

  • SHA1

    51573f91984b67370315d1ce23d9c67f12189fe9

  • SHA256

    2b80a3cb4517e0a89d8b41806d3d9f04514106b8a305c213b5f081e413ba2cf3

  • SHA512

    c73fc73fd82d95b1a06e1ad6d80d88ddb222e1c93952e6ab86cb0c34e6cb0b300b1f4b65fc5d036c18284f9483cbfdcd6e4bfbad65d5d42a8aefb5af0ff3d0db

  • SSDEEP

    3072:hWnzlvnJ4pMSKcq024ho1mtye3lFDrFDHZtObmOm3AIpwbjshrmP24ho1mtye3lg:0nzJWMD3ZsFj5t13LJhrmMsFj5tw

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://tat-neftbank.ru/kkq.php

http://tat-neftbank.ru/wcmd.htm

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2b80a3cb4517e0a89d8b41806d3d9f04514106b8a305c213b5f081e413ba2cf3N
    .exe windows:1 windows x86 arch:x86

    95e6f8741083e0c7d9a63d45e2472360


    Headers

    Imports

    Sections