General

  • Target

    85fea4321ab8ebcb409bffaa12fd752f8e4d55b77e85d54fa24596411cd9d315N

  • Size

    194KB

  • MD5

    419b7e17821871bb078f2f48f64b1cf0

  • SHA1

    4b3e1d5ba0e26af40d40f90274c1df5139dc5223

  • SHA256

    85fea4321ab8ebcb409bffaa12fd752f8e4d55b77e85d54fa24596411cd9d315

  • SHA512

    3e6805bb7878d9683ae1cb0254bc6c8b2f956783f0511d9a0a3ba803bf5054f3cd5a3884873736657f6ba4f5260de033e949764c9925f00c791b56162ef24b26

  • SSDEEP

    6144:X1p8r+41RdSfUNRbCeKpNYxWlJ7mkD6pNY:lp8r+4

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://tat-neftbank.ru/kkq.php

http://tat-neftbank.ru/wcmd.htm

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 85fea4321ab8ebcb409bffaa12fd752f8e4d55b77e85d54fa24596411cd9d315N
    .exe windows:1 windows x86 arch:x86

    95e6f8741083e0c7d9a63d45e2472360


    Headers

    Imports

    Sections