General

  • Target

    9fd51ba69cee556ca30d6807011c40b60c0e407cca77eaede96f0824bffcdb43N

  • Size

    219KB

  • MD5

    4d58a6efd06574f10fc5a7f44a34a2d0

  • SHA1

    79004a41e8681f5223a3ee4a4da5bef3e6c68847

  • SHA256

    9fd51ba69cee556ca30d6807011c40b60c0e407cca77eaede96f0824bffcdb43

  • SHA512

    3345b858b61d6dab042b709c0c89ca751198d7db62e857e69a91f406be7b6af201913b8b58de810fb64f3bc49144ecf3969553958507d50c3694a83f4e8a7a70

  • SSDEEP

    3072:FHUW4uuw/PzwuZkO0aDb/IBPCOQvU6z314EXrjvwSfYrwBt:14ulnzDOO0aDD4PCxdXXwSfYrwB

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://tat-neftbank.ru/kkq.php

http://tat-neftbank.ru/wcmd.htm

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 9fd51ba69cee556ca30d6807011c40b60c0e407cca77eaede96f0824bffcdb43N
    .exe windows:1 windows x86 arch:x86

    95e6f8741083e0c7d9a63d45e2472360


    Headers

    Imports

    Sections