General

  • Target

    2900df08c7f060738906d4b0e92c3c0105c8311c8283471421852f25848bd4e6N

  • Size

    219KB

  • MD5

    c8bf55fbf04c9cc04c855a0c63313e00

  • SHA1

    e4a5a3aa96d5a648393555e5d62f880b5317d603

  • SHA256

    2900df08c7f060738906d4b0e92c3c0105c8311c8283471421852f25848bd4e6

  • SHA512

    c8bdd0c9e2976b4389ae454f510fe05dc5ad761959a1dccdda3ecf8c6ffd388ed0d7a09c383bf6a2e45147e1044748b7b3ebb238e0e8d01dfd6ac3941ccad3b9

  • SSDEEP

    3072:ckP+RBBRPH3anZPzwuZkO0aDb/IBPCOQvU6z314EXrjvwSfYrwBt:cYW1EhzDOO0aDD4PCxdXXwSfYrwB

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://tat-neftbank.ru/kkq.php

http://tat-neftbank.ru/wcmd.htm

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2900df08c7f060738906d4b0e92c3c0105c8311c8283471421852f25848bd4e6N
    .exe windows:1 windows x86 arch:x86

    95e6f8741083e0c7d9a63d45e2472360


    Headers

    Imports

    Sections