General
-
Target
8163cffd8e992fc035226df595236277862535e49631908edf3d0b7c9bfb8dc2N
-
Size
300KB
-
Sample
241004-ptcl3sthqk
-
MD5
59d7d273debede907571ec2138734360
-
SHA1
c183367c1ea2cc5645fd6db1a1a8ac6ea1244900
-
SHA256
8163cffd8e992fc035226df595236277862535e49631908edf3d0b7c9bfb8dc2
-
SHA512
109dd0078b8d34f807484dc8492ffc28b6beb804ced134b5cbd55480e9893c9b8d81321a99a31f0c331538c754c6efca756ac7434ce1afa93517bf06c3e1cd48
-
SSDEEP
6144:Q5i5htHl9pS5tT7B9mo436zthGEU5tT7B9mo43N:Q5iFHly5tHKo4othW5tHKo4d
Static task
static1
Behavioral task
behavioral1
Sample
8163cffd8e992fc035226df595236277862535e49631908edf3d0b7c9bfb8dc2N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
8163cffd8e992fc035226df595236277862535e49631908edf3d0b7c9bfb8dc2N.exe
Resource
win10v2004-20240802-en
Malware Config
Extracted
berbew
http://tat-neftbank.ru/kkq.php
http://tat-neftbank.ru/wcmd.htm
Targets
-
-
Target
8163cffd8e992fc035226df595236277862535e49631908edf3d0b7c9bfb8dc2N
-
Size
300KB
-
MD5
59d7d273debede907571ec2138734360
-
SHA1
c183367c1ea2cc5645fd6db1a1a8ac6ea1244900
-
SHA256
8163cffd8e992fc035226df595236277862535e49631908edf3d0b7c9bfb8dc2
-
SHA512
109dd0078b8d34f807484dc8492ffc28b6beb804ced134b5cbd55480e9893c9b8d81321a99a31f0c331538c754c6efca756ac7434ce1afa93517bf06c3e1cd48
-
SSDEEP
6144:Q5i5htHl9pS5tT7B9mo436zthGEU5tT7B9mo43N:Q5iFHly5tHKo4othW5tHKo4d
Score10/10-
Adds autorun key to be loaded by Explorer.exe on startup
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-