General

  • Target

    ab469c894002b1a2bfae79658398604ed23abf7775e96ca6c00b895f929f2867N

  • Size

    194KB

  • MD5

    e36506b1856f76f105df6f6061fcf470

  • SHA1

    e700bd4cca86fbc95b239f8d2e5241cbcb2ea265

  • SHA256

    ab469c894002b1a2bfae79658398604ed23abf7775e96ca6c00b895f929f2867

  • SHA512

    4ff6af8439e6b561d4b57638f177ee7a74044ea672039acdfeeb58608174b179784a85c72fff21a2873aa47fd123f62fe3994ba2afc9c479f978eb7a8cf155f0

  • SSDEEP

    1536:pLms9sdN58tnuBqCQZatMIM/5/KEatMIGuatMIc/zT4a5GV:b9s58tIqC4mMIM/kEmMIGumMIc/1GV

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://tat-neftbank.ru/kkq.php

http://tat-neftbank.ru/wcmd.htm

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ab469c894002b1a2bfae79658398604ed23abf7775e96ca6c00b895f929f2867N
    .exe windows:1 windows x86 arch:x86

    95e6f8741083e0c7d9a63d45e2472360


    Headers

    Imports

    Sections