General

  • Target

    44720ab1cb84cba6efa6abf3bc72dd54ba6f155a029db0125134f05200abcc18

  • Size

    128KB

  • MD5

    b0da901d873f49796535deff43fa9d79

  • SHA1

    ec52376f8cf5f9c0ef8daeee0d526d7b50c78b7a

  • SHA256

    44720ab1cb84cba6efa6abf3bc72dd54ba6f155a029db0125134f05200abcc18

  • SHA512

    cf3254f6bf2294b069a2699ce22c7adba91452c9bab68683a74dedaf377ab041ddb1639cadb676cac9ac2d685caa432dbe19c95b530cd42418c8fdb78ec93390

  • SSDEEP

    1536:dQycojSeLdBQH4aQyNi8QjILQ9FKGXllUDtM60TD4ruhiZlrQIFiglF9xZ95Q:dOyLdB2syNijKG7UDd0pCrQIFdFtLQ

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://tat-neftbank.ru/kkq.php

http://tat-neftbank.ru/wcmd.htm

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 44720ab1cb84cba6efa6abf3bc72dd54ba6f155a029db0125134f05200abcc18
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections