General

  • Target

    ccb680a4036768e449888dfd200a4febec6a081c72f181e8085d81a31773ab98N

  • Size

    224KB

  • MD5

    7408b0a678cc205622b06ba63d726390

  • SHA1

    474fc5f96a9940d7a68088643c5b77ff88371b13

  • SHA256

    ccb680a4036768e449888dfd200a4febec6a081c72f181e8085d81a31773ab98

  • SHA512

    63956d2467ff6dad495b94458072f2589487df307e93a17acc0cacd365e4c448cd9fbc9317bdb66edc0e91cb85dcbf7b5180c694f46f60ee0d5ad735c15bc45e

  • SSDEEP

    3072:h+C6bpLqZkHGWsJ4lKIuYUvIMDrFDHZtOgxBOXXwwfBoD6N3h8N5G2qVUDrFDHZj:QCCL9mz4lC4s5tTDUZNSN58VU5tTtf

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://tat-neftbank.ru/kkq.php

http://tat-neftbank.ru/wcmd.htm

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ccb680a4036768e449888dfd200a4febec6a081c72f181e8085d81a31773ab98N
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections