Overview

overview

10

Static

static

10

a35e6ed568...40.exe

windows7-x64

10

a35e6ed568...40.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a35e6ed5682b8fe5eba88d00da9ebbcf01f3787d661405ffe5d9245d1a534940

  • Size

    188KB

  • MD5

    f2a388e95a27444108c2b212cc730e15

  • SHA1

    cc4685c9127c9acbd96ca7c5509f13069828180a

  • SHA256

    a35e6ed5682b8fe5eba88d00da9ebbcf01f3787d661405ffe5d9245d1a534940

  • SHA512

    36f880e09c8343f9adf38455c23508cf51d7bd4fde16f4f566f48a83e3b7c40ed8856e05eaf4a6d315d27a0c9327080bbb7de9c7dfa0e9bc52a1adadb084038f

  • SSDEEP

    3072:wvBm7ApKBYMQeeas7usluTXp6UF5wzec+tZOnU1/s5HH0AU/yRvS3u121Te:wJyAkBVQWs6s21L7/s50z/Wa3/M

Score
10/10
berbew

Malware Config

Extracted

Family

berbew

C2

http://tat-neftbank.ru/kkq.php

http://tat-neftbank.ru/wcmd.htm

Signatures

  • Berbew family
    berbew
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a35e6ed5682b8fe5eba88d00da9ebbcf01f3787d661405ffe5d9245d1a534940
    .exe windows:1 windows x86 arch:x86

    95e6f8741083e0c7d9a63d45e2472360


    Headers

    Imports

    Sections