General

  • Target

    51f53510d284e5160088e0f96d509e29293f3f8fc70173b0caef546dba077fb0N

  • Size

    194KB

  • MD5

    b511833154008b6f89b84ba3bdccb3f0

  • SHA1

    3711ef27d2c96d5840ce66757feccb8d0af44115

  • SHA256

    51f53510d284e5160088e0f96d509e29293f3f8fc70173b0caef546dba077fb0

  • SHA512

    88c55ab315b6d06922437dd46f5a8dfd2abccde94cb818c02ea2c23b0935652b27fb8255c6b1fe6f4ccad136020fd494248910702edadde1ae851e708fdefd36

  • SSDEEP

    6144:pA/lEqcvLQHJ17NdSfUNRbCeKpNYxWlJ7mkD6pNY:pA/lEqqkp1

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://tat-neftbank.ru/kkq.php

http://tat-neftbank.ru/wcmd.htm

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 51f53510d284e5160088e0f96d509e29293f3f8fc70173b0caef546dba077fb0N
    .exe windows:1 windows x86 arch:x86

    95e6f8741083e0c7d9a63d45e2472360


    Headers

    Imports

    Sections