General

  • Target

    784fc3c3647d152179257321aeedfcf648228fc0ea444537e7744e6ab1c23e0aN

  • Size

    250KB

  • MD5

    f410e91efdf1115290a4274c76e59a10

  • SHA1

    23e8a890cddf0272e5dde553bff5f235a3161c74

  • SHA256

    784fc3c3647d152179257321aeedfcf648228fc0ea444537e7744e6ab1c23e0a

  • SHA512

    ceda8fde8dfa0c839e152523e5aee2eb3a7b22173adc2abf64a7a46353a8c4838177630001ccb2313efe5949830815703f6bb559e497bd3454e00efda2cc727c

  • SSDEEP

    6144:XkLrgMFvCvfmZ7KRRRGBCvfmZ7KFpNlJTBCvfmZ7d:ogv

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://tat-neftbank.ru/kkq.php

http://tat-neftbank.ru/wcmd.htm

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 784fc3c3647d152179257321aeedfcf648228fc0ea444537e7744e6ab1c23e0aN
    .exe windows:1 windows x86 arch:x86

    95e6f8741083e0c7d9a63d45e2472360


    Headers

    Imports

    Sections