General

  • Target

    3051dd4e28e17bdc09884891864e400159758da9829e1a0d8d60a451fece89ae

  • Size

    194KB

  • MD5

    f4ec524de784cc907b3e5cb6e0811db8

  • SHA1

    76e4e4d4aaedd9a1d156aacff6c8932ee00727d7

  • SHA256

    3051dd4e28e17bdc09884891864e400159758da9829e1a0d8d60a451fece89ae

  • SHA512

    044193d1bbb14f18142eba69a94be431b8621f581095225b33b87f9be1c3ff07ec7f3bbf9a28893d6dc43a05789e09e269ce59bd03aa9b1f8880eb161ce8593c

  • SSDEEP

    1536:HVlzre7lgTgq3T7cNZatMIM/5/KEatMIGuatMIc/zT4a5GV:PzrelDCczmMIM/kEmMIGumMIc/1GV

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://tat-neftbank.ru/kkq.php

http://tat-neftbank.ru/wcmd.htm

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3051dd4e28e17bdc09884891864e400159758da9829e1a0d8d60a451fece89ae
    .exe windows:1 windows x86 arch:x86

    95e6f8741083e0c7d9a63d45e2472360


    Headers

    Imports

    Sections