General

  • Target

    4176e6b9de614451fbaf9aaa95a1897978694710114595dc4fc2a032651dd12eN

  • Size

    188KB

  • MD5

    993bfc61220976cf0cc5d15180f55a60

  • SHA1

    bebde5515702c5fbf47ed71f8356feb15d1a061f

  • SHA256

    4176e6b9de614451fbaf9aaa95a1897978694710114595dc4fc2a032651dd12e

  • SHA512

    122cb04562803f554d908b76028f26c812b3e67bbd45345e1a44c0c6111acf8ce4dbbda8ee96cc15fbc0235e1562132e7eea2b00eb240795ca3641e590c37ba0

  • SSDEEP

    3072:2S7KiuCMpd87usluTXp6UF5wzec+tZOnU1/s5HH0AU/yRvS3u121Te:57huCGd86s21L7/s50z/Wa3/M

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://tat-neftbank.ru/kkq.php

http://tat-neftbank.ru/wcmd.htm

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4176e6b9de614451fbaf9aaa95a1897978694710114595dc4fc2a032651dd12eN
    .exe windows:1 windows x86 arch:x86

    95e6f8741083e0c7d9a63d45e2472360


    Headers

    Imports

    Sections