General

  • Target

    9c18b0323f57f6cc4b8b63c6c14499356d5e88508d0c0b58937c0a8152456f08N

  • Size

    194KB

  • MD5

    bf1cbfacfca081e2a5533392f7c5bb40

  • SHA1

    4ac6a6ba437b633e12669bed33c821dab5aab6e7

  • SHA256

    9c18b0323f57f6cc4b8b63c6c14499356d5e88508d0c0b58937c0a8152456f08

  • SHA512

    5a06fbc3fa359c638aac87d96e79c09a8fb148b1afaa5976bbac49389d420b850c0638580baacca7f9a200f02aa0da07152d5ccd5433d2889c48637834eedf52

  • SSDEEP

    3072:a3Qzd+2vi7TlHkxTImMIM/kEmMIGumMIc/1GV:MQgtFcI5/pbuh/UV

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://tat-neftbank.ru/kkq.php

http://tat-neftbank.ru/wcmd.htm

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 9c18b0323f57f6cc4b8b63c6c14499356d5e88508d0c0b58937c0a8152456f08N
    .exe windows:1 windows x86 arch:x86

    95e6f8741083e0c7d9a63d45e2472360


    Headers

    Imports

    Sections