General

  • Target

    0e37e505a3fc4b41bab736af34f35b9dbfb13fbef3b78438e5f0ef234a259b70N

  • Size

    113KB

  • MD5

    fc66db527c224d0aad35aab45aa4db80

  • SHA1

    14ef9fd24562dd053dc6aa3e0da120794f1a4572

  • SHA256

    0e37e505a3fc4b41bab736af34f35b9dbfb13fbef3b78438e5f0ef234a259b70

  • SHA512

    419f2c20fbdb4a8fdbb77b05ab1cf836a1982b19301b0bb4d75653ad65811f5c5c6c024beb39fbb4f5be0bef908242a4c728b4a0dc31245b77c72014f216c4f2

  • SSDEEP

    1536:MHD1BRlKlHAeyJnTDgO617DWkZFfScD7SzCbHWrAW8wTWiliX:MH3XEInngOuGkZFfFSebHWrH8wTW0

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://tat-neftbank.ru/kkq.php

http://tat-neftbank.ru/wcmd.htm

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0e37e505a3fc4b41bab736af34f35b9dbfb13fbef3b78438e5f0ef234a259b70N
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections