General

  • Target

    994649a023f160ea93da517077b7a04c5f9f8c0240c9ee6a6e8f0909b3716ddbN

  • Size

    194KB

  • MD5

    3145509eff2929d6ba5e43d43a19cda0

  • SHA1

    e20ede27ba0bfbb8dbc3ff80f89aec0ddd4d2e6e

  • SHA256

    994649a023f160ea93da517077b7a04c5f9f8c0240c9ee6a6e8f0909b3716ddb

  • SHA512

    21807bc12545c6f03ff8faaca6f34dac77d1a116a913ffdcb44a955b91216b9e2216d91235526fc0eba6c3fe685b26dfb9b8b85540150fdc1dac99837f62b879

  • SSDEEP

    6144:5Ghj1RJ7dSfUNRbCeKpNYxWlJ7mkD6pNY:

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://tat-neftbank.ru/kkq.php

http://tat-neftbank.ru/wcmd.htm

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 994649a023f160ea93da517077b7a04c5f9f8c0240c9ee6a6e8f0909b3716ddbN
    .exe windows:1 windows x86 arch:x86

    95e6f8741083e0c7d9a63d45e2472360


    Headers

    Imports

    Sections