Overview

overview

10

Static

static

10

efdd78aa40...0N.exe

windows7-x64

10

efdd78aa40...0N.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    efdd78aa40ae75e8d19d5fe289c8d44ed256ba5c14f254310e461ce8c60d0910N

  • Size

    219KB

  • MD5

    d1bf9ef2dd381765a9e61874f4d33a10

  • SHA1

    552ef823f7302ba1f2f8789007fed0be4f093ee4

  • SHA256

    efdd78aa40ae75e8d19d5fe289c8d44ed256ba5c14f254310e461ce8c60d0910

  • SHA512

    4ef6dcded80e0e87e18d9f87fbc11a1decfe27f7664c551352e47467c9ee84273f65e1f5d51d873440b5353d2f671ddd52ccc2af608b52679cdff86c59797496

  • SSDEEP

    3072:BkWUNjDe0PzwuZkO0aDb/IBPCOQvU6z314EXrjvwSfYrwBt:+W0eqzDOO0aDD4PCxdXXwSfYrwB

Score
10/10
berbew

Malware Config

Extracted

Family

berbew

C2

http://tat-neftbank.ru/kkq.php

http://tat-neftbank.ru/wcmd.htm

Signatures

  • Berbew family
    berbew
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • efdd78aa40ae75e8d19d5fe289c8d44ed256ba5c14f254310e461ce8c60d0910N
    .exe windows:1 windows x86 arch:x86

    95e6f8741083e0c7d9a63d45e2472360


    Headers

    Imports

    Sections