General

  • Target

    a2ebbc28769d612204b0ecd09c0b9ef5e6226f27b2a8282b55acfdd8d8835d6cN

  • Size

    113KB

  • MD5

    957e4f56820b1867821eb67ad3d5d410

  • SHA1

    4a9605d7e4e6f99dbaee1db20e2a8566d8fcd9c4

  • SHA256

    a2ebbc28769d612204b0ecd09c0b9ef5e6226f27b2a8282b55acfdd8d8835d6c

  • SHA512

    c0ee8d28deb9a06cd01d2e0b6a1cfe720ff9b3e2cdf72c6092337e8d5373fec0d67d0ed4cc0e67a134e82b79c9da4fbc35027a42dd6b924db60994fa818d45f1

  • SSDEEP

    3072:s9ZTTUzRi2W9xlOuGkZFfFSebHWrH8wTW0:s9VTwiZxU7otSeWrP

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://tat-neftbank.ru/kkq.php

http://tat-neftbank.ru/wcmd.htm

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a2ebbc28769d612204b0ecd09c0b9ef5e6226f27b2a8282b55acfdd8d8835d6cN
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections