General

  • Target

    8f8e5428d6bb9fe1746c524e14e1eb6d4a38c5d68a3b557ea36bcdd3d47aec23N

  • Size

    232KB

  • MD5

    f9a981c940b714dd4776c07f7d00acc0

  • SHA1

    963c3bd62474f13184a7411f64cd7e4373480e03

  • SHA256

    8f8e5428d6bb9fe1746c524e14e1eb6d4a38c5d68a3b557ea36bcdd3d47aec23

  • SHA512

    6363df73dbf31c1addb94617ad4838d9a705f1971b599ed810b5556a61ed9561ee5e5df0233433616afd0ff973432797fef5418e02878cd63bb06be2c4eb66ff

  • SSDEEP

    3072:Ex+TkogyoiMgEIj7usluTXp6UF5wzec+tZOnU1/s5HH0AU/yRvS3u121TzlbNRfz:VTkKoioIj6s21L7/s50z/Wa3/PNlPX

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://tat-neftbank.ru/kkq.php

http://tat-neftbank.ru/wcmd.htm

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 8f8e5428d6bb9fe1746c524e14e1eb6d4a38c5d68a3b557ea36bcdd3d47aec23N
    .exe windows:1 windows x86 arch:x86

    95e6f8741083e0c7d9a63d45e2472360


    Headers

    Imports

    Sections