General

  • Target

    2f20b6e5504ae8a14afb2cbf905e9a0701b483359f382fada4de5d2c4d157b6eN

  • Size

    219KB

  • MD5

    0fbc672e21c0302ca105cfb4568c9ec0

  • SHA1

    f41bfdb7f55205ef5d4f0ce709bf2854c9e9fd10

  • SHA256

    2f20b6e5504ae8a14afb2cbf905e9a0701b483359f382fada4de5d2c4d157b6e

  • SHA512

    26fce779297ed0692d76a29dc0dcc76a5a2b70b862ddd73672445ce59ce4636ee307664f3fc820f903b71ea541396ef4195fe2d03c112474ca30a7e296fd047c

  • SSDEEP

    6144:702kV9xe0/zDOO0aDD4PCxdXXwSfYrwB:YjxNOOdDD4PCxdXXwSfYr

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://tat-neftbank.ru/kkq.php

http://tat-neftbank.ru/wcmd.htm

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2f20b6e5504ae8a14afb2cbf905e9a0701b483359f382fada4de5d2c4d157b6eN
    .exe windows:1 windows x86 arch:x86

    95e6f8741083e0c7d9a63d45e2472360


    Headers

    Imports

    Sections