General

  • Target

    3bb31e735e5bcc842a26b63bece07f520446405926dac277ae6607a6e786d45bN

  • Size

    237KB

  • MD5

    f9a91886b20d25a67b64b837d1e44f00

  • SHA1

    228b5c1562348f9f25762c6772a32060967f9207

  • SHA256

    3bb31e735e5bcc842a26b63bece07f520446405926dac277ae6607a6e786d45b

  • SHA512

    3911ade2a485466c8628c17fff9e21cba047af64bc9bb0c7e14f3a116d9dcddbad08f681c7ae5209da86463a22a31901cdd8cb44c16ae69196f5687409c9fe6f

  • SSDEEP

    3072:7Kyqv4x697IyAxAUbj8Nq75Sq4iqnAUUjE02ZoL9snKKq:7rqv797IyAxXj8U5ihYjEToZY8

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://tat-neftbank.ru/kkq.php

http://tat-neftbank.ru/wcmd.htm

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3bb31e735e5bcc842a26b63bece07f520446405926dac277ae6607a6e786d45bN
    .exe windows:1 windows x86 arch:x86

    95e6f8741083e0c7d9a63d45e2472360


    Headers

    Imports

    Sections