General

  • Target

    59fd4bbd0b7c28aed0ce6491d51125f8894d37da9c5f2e4f0d356c3c0b73e780N

  • Size

    194KB

  • MD5

    ee509167fa070185627081a9cf3c9ae0

  • SHA1

    c45c16ddc2d2a9a60e3b1dac328e75fd3060f63f

  • SHA256

    59fd4bbd0b7c28aed0ce6491d51125f8894d37da9c5f2e4f0d356c3c0b73e780

  • SHA512

    6b52f9ad3679bc050c732def53117699eff07e9abe80a84e898988650c98e3e279cc4378aeb041c60007fdcf7ec4f994209f494f118ad51a21a66103c4b35e7c

  • SSDEEP

    3072:JYo8HVKdSfUNRbCeR0pN03xWlJ7mlOD6pN03:iVKdSfUNRbCeKpNYxWlJ7mkD6pNY

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://tat-neftbank.ru/kkq.php

http://tat-neftbank.ru/wcmd.htm

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 59fd4bbd0b7c28aed0ce6491d51125f8894d37da9c5f2e4f0d356c3c0b73e780N
    .exe windows:1 windows x86 arch:x86

    95e6f8741083e0c7d9a63d45e2472360


    Headers

    Imports

    Sections