General

  • Target

    df7c603e840334ba2895abf7008058e548dd5a9f076d6054d9cc57c74dbcd2cdN

  • Size

    219KB

  • MD5

    bcc797252b8f5bc6661cc93f3131c7d0

  • SHA1

    86663b045f750cc7c32ac939a25173334dd24107

  • SHA256

    df7c603e840334ba2895abf7008058e548dd5a9f076d6054d9cc57c74dbcd2cd

  • SHA512

    16ed80ae45935bbecdb6ee11776ee57016aa8af59d6dd6646e753c4aabe806df6a8f76736ca68892e3be4c25192b36db4b19e2674bd5ed64a2fca98adce8c5e6

  • SSDEEP

    3072:rQT5C8ZDFlUI+uN+0pPzwuZkO0aDb/IBPCOQvU6z314EXrjvwSfYrwBt:KB4uQ0xzDOO0aDD4PCxdXXwSfYrwB

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://tat-neftbank.ru/kkq.php

http://tat-neftbank.ru/wcmd.htm

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • df7c603e840334ba2895abf7008058e548dd5a9f076d6054d9cc57c74dbcd2cdN
    .exe windows:1 windows x86 arch:x86

    95e6f8741083e0c7d9a63d45e2472360


    Headers

    Imports

    Sections