General

  • Target

    cc8b0f2d59e0dd940a15e9208284d492580721b0fe2eeb3c3dc341e072d87b0eN

  • Size

    250KB

  • MD5

    b2f15a6a2495c033cf372f8ac48a5770

  • SHA1

    e55ac4cb17bca69425dcb1663d1225279b8269d8

  • SHA256

    cc8b0f2d59e0dd940a15e9208284d492580721b0fe2eeb3c3dc341e072d87b0e

  • SHA512

    e0bc8f56c78a5639d171e54946c2b3d12e5c34689ad06070157203736487b0792be2b4c8608328e0d8f1df56e2361a568b12bad0c9a2ef20ea2d0d93fc00c557

  • SSDEEP

    6144:YF5G+0mPvCvfmZ7KRRRGBCvfmZ7KFpNlJTBCvfmZ7d:F1

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://tat-neftbank.ru/kkq.php

http://tat-neftbank.ru/wcmd.htm

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • cc8b0f2d59e0dd940a15e9208284d492580721b0fe2eeb3c3dc341e072d87b0eN
    .exe windows:1 windows x86 arch:x86

    95e6f8741083e0c7d9a63d45e2472360


    Headers

    Imports

    Sections