General

  • Target

    2d449c78d681f8e1f0926a83fb368aa321b4e5cbf850c76189714591bb58c9ea

  • Size

    101KB

  • MD5

    e32ad565610e802e3500104e0b12d422

  • SHA1

    534d7b0cc45212ff4f5a7d2c0f83be557778db98

  • SHA256

    2d449c78d681f8e1f0926a83fb368aa321b4e5cbf850c76189714591bb58c9ea

  • SHA512

    80ec49b3ca8f4315e60b47ceacd85fd324491ec6198fdf0bf1262d04c7fb00873dad0c0089e6cc22073bb86b03258634a1221a3d982b1d5dbbcfe120f5e5deaa

  • SSDEEP

    3072:5AFI67PdPFeDnZrduXqbyu0sY7q5AnrHY4vDX:wI67Pj6w853Anr44vDX

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://tat-neftbank.ru/kkq.php

http://tat-neftbank.ru/wcmd.htm

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2d449c78d681f8e1f0926a83fb368aa321b4e5cbf850c76189714591bb58c9ea
    .exe windows:1 windows x86 arch:x86

    95e6f8741083e0c7d9a63d45e2472360


    Headers

    Imports

    Sections