General

  • Target

    52dc3fedae33dd49f71d7b60240eb38c00328963c22d2e645db45689c23ce3bcN

  • Size

    101KB

  • MD5

    f52eca87d27ccb93c2ac118e326db260

  • SHA1

    f9e0e3b3632dd58add677d0217c9f036e0804099

  • SHA256

    52dc3fedae33dd49f71d7b60240eb38c00328963c22d2e645db45689c23ce3bc

  • SHA512

    df5903f19b42f94ff3b90789fd2f272ab7b28a8178532f497a7bf0f1ffff063634e7067ed384dedd0ed65470ee2a45f195b4dbe1648b63a42ee1d117c69fe106

  • SSDEEP

    3072:jC4BCEBdJ4duXqbyu0sY7q5AnrHY4vDX:jhCib/853Anr44vDX

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://tat-neftbank.ru/kkq.php

http://tat-neftbank.ru/wcmd.htm

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 52dc3fedae33dd49f71d7b60240eb38c00328963c22d2e645db45689c23ce3bcN
    .exe windows:1 windows x86 arch:x86

    95e6f8741083e0c7d9a63d45e2472360


    Headers

    Imports

    Sections