General

  • Target

    a9c88f89b11a0002edf7a7d2985ea355f4696c9267617689b9c98adb3c6f0c5fN

  • Size

    113KB

  • MD5

    af2b9fddfd986b4b3fd7a3aac5f66000

  • SHA1

    f9bf936a6363c1759f0542623769a9568cc5fa5e

  • SHA256

    a9c88f89b11a0002edf7a7d2985ea355f4696c9267617689b9c98adb3c6f0c5f

  • SHA512

    7c19ad78f11ae649f6343cada9ccdf4cdbfc2bd13c2187c840ddd53e0a8b17cfe5a890dfd5e8e16c1b3219e99dc6de1efc2cdc02692ca6cdd0aaf11632962433

  • SSDEEP

    3072:0e94GZ6r5oD3+OuGkZFfFSebHWrH8wTW0:V4MJ3z7otSeWrP

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://tat-neftbank.ru/kkq.php

http://tat-neftbank.ru/wcmd.htm

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a9c88f89b11a0002edf7a7d2985ea355f4696c9267617689b9c98adb3c6f0c5fN
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections