General

  • Target

    7802fc7a3c7ad9be93dd44a9d5561ce96c1dbc2ef17324e00b8425a1b38c028bN

  • Size

    194KB

  • MD5

    3fd9a626ac2fbb0f6ddf0c49d4672200

  • SHA1

    ec7e54840c36bfd35999ce04fa5f6ac030749222

  • SHA256

    7802fc7a3c7ad9be93dd44a9d5561ce96c1dbc2ef17324e00b8425a1b38c028b

  • SHA512

    70cb3ff5b7ec0663420d885e109fdde85aae673854ae1f4a1f47d2f67bd1a72e952856680e0a266d3fd33672b87a3c0a6934330c19ef7fa65b035d9a18c552dc

  • SSDEEP

    3072:ZWBbXb+N8AU4rArHrrrrrrrrrrrrrrh6Pp+HmMIM/kEmMIGumMIc/1GV:Wo8z/rrrrrrrrrrrrrrh6h45/pbuh/UV

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://tat-neftbank.ru/kkq.php

http://tat-neftbank.ru/wcmd.htm

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 7802fc7a3c7ad9be93dd44a9d5561ce96c1dbc2ef17324e00b8425a1b38c028bN
    .exe windows:1 windows x86 arch:x86

    95e6f8741083e0c7d9a63d45e2472360


    Headers

    Imports

    Sections