General

  • Target

    789e9699f4033cf826117eda92fb188375ad5693decef77b2ae34f03e094e522N

  • Size

    194KB

  • MD5

    a6f5fc2f9b73ba5638ba4fc9998be5c0

  • SHA1

    5858aa79fa178d3a1cb994d20ff32aa9a1865454

  • SHA256

    789e9699f4033cf826117eda92fb188375ad5693decef77b2ae34f03e094e522

  • SHA512

    5aa2a31f87b04b995d3e49d834f93c172b7c7ba851e303495d226c7c37c80eac112d9700adf6c92fa379357582771c677c1ac9cd05d3d4385c8745097f2756f0

  • SSDEEP

    6144:Xm1W0q+PJKdSfUNRbCeKpNYxWlJ7mkD6pNY:W1W+P

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://tat-neftbank.ru/kkq.php

http://tat-neftbank.ru/wcmd.htm

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 789e9699f4033cf826117eda92fb188375ad5693decef77b2ae34f03e094e522N
    .exe windows:1 windows x86 arch:x86

    95e6f8741083e0c7d9a63d45e2472360


    Headers

    Imports

    Sections