General

  • Target

    4ea6beade75db06d308be7cc24f71c337bdc49fe2bda17af5c5f2db50377ff71N

  • Size

    128KB

  • MD5

    e4e4f485833ecacef62599ec9220dc40

  • SHA1

    1cca4884e5ca2766d16e68f6a4b72314c161437a

  • SHA256

    4ea6beade75db06d308be7cc24f71c337bdc49fe2bda17af5c5f2db50377ff71

  • SHA512

    9d1c2725fab39af500c10f99d63494ae9ff07d2f3f94a8d42228de931fde6f8abd8dea9b49dc75e6f30ab3c83f8eebda2a8e63edd62221b68456af03b430f748

  • SSDEEP

    1536:kux6NyWXyccI9Bjbu8s+QjILQ9FKGXllUDtM60TD4ruhiZlrQIFiglF9xZ95Q:khyWJ9oLtKG7UDd0pCrQIFdFtLQ

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://tat-neftbank.ru/kkq.php

http://tat-neftbank.ru/wcmd.htm

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4ea6beade75db06d308be7cc24f71c337bdc49fe2bda17af5c5f2db50377ff71N
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections