Overview

overview

10

Static

static

10

5930cc9564...f8.exe

windows7-x64

10

5930cc9564...f8.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    5930cc9564d378fd1098db5c63fbf80ddffc883350d10365de82a50eb6dd6df8

  • Size

    237KB

  • MD5

    a5cbe2cfa49cc26af990b5e837699825

  • SHA1

    88bfa8fb2a6416442eb58fe913cba69442345d75

  • SHA256

    5930cc9564d378fd1098db5c63fbf80ddffc883350d10365de82a50eb6dd6df8

  • SHA512

    cd724107f0a064d39bb87283219f6923864749d4fbfea037e17afd5fecf6081ca6fe74d18b564f6ac8d083dc25b2ffb0eea85ab67bbf5e0e067e4c4fd9543dcf

  • SSDEEP

    3072:O0dR6fyYo5SAUbj8Nq75Sq4iqnAUUjE02ZoL9snKKq:OHfyYo5SXj8U5ihYjEToZY8

Score
10/10
berbew

Malware Config

Extracted

Family

berbew

C2

http://tat-neftbank.ru/kkq.php

http://tat-neftbank.ru/wcmd.htm

Signatures

  • Berbew family
    berbew
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 5930cc9564d378fd1098db5c63fbf80ddffc883350d10365de82a50eb6dd6df8
    .exe windows:1 windows x86 arch:x86

    95e6f8741083e0c7d9a63d45e2472360


    Headers

    Imports

    Sections