General

  • Target

    1d7f4162614c0ba40c5a9f3a3522ccc3263f88256e325785c1746dfa2596928eN

  • Size

    250KB

  • MD5

    d6239ea682f24f9156c67b39e911ac30

  • SHA1

    d61d74a453e70262ddb5b3c74997b1c4074bea7c

  • SHA256

    1d7f4162614c0ba40c5a9f3a3522ccc3263f88256e325785c1746dfa2596928e

  • SHA512

    252fd6b554bcc99d5f536ce2383429fd1abbc222fbc3b29a101f8431822facfa0ac0eb9074fb8f6dca8fab361f41c3fa6f694bb3568fc126429a6758ba2daa97

  • SSDEEP

    6144:lFXnJvCvfmZ7KRRRGBCvfmZ7KFpNlJTBCvfmZ7d:fQ

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://tat-neftbank.ru/kkq.php

http://tat-neftbank.ru/wcmd.htm

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1d7f4162614c0ba40c5a9f3a3522ccc3263f88256e325785c1746dfa2596928eN
    .exe windows:1 windows x86 arch:x86

    95e6f8741083e0c7d9a63d45e2472360


    Headers

    Imports

    Sections