General

  • Target

    43bb07f798ffd654fe00913d4f37cd8c7736d1c4e1830b8cdedef844a95f794bN

  • Size

    113KB

  • MD5

    ca08c098aa9ae38e62419a20c686e480

  • SHA1

    e39a758c325097552577d09fbb17d1a0db6653eb

  • SHA256

    43bb07f798ffd654fe00913d4f37cd8c7736d1c4e1830b8cdedef844a95f794b

  • SHA512

    f06243bae310f3b6bbe44368f7c48a1412186cd0b78b9ce0db1027d6cb1781b10f360e7abbf5c68a793e085feb3a12da9df2c26cb89cc0f02e0af9ba570e7dc4

  • SSDEEP

    3072:t7YN41i7vSOVOuGkZFfFSebHWrH8wTW0:t5i7lk7otSeWrP

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://tat-neftbank.ru/kkq.php

http://tat-neftbank.ru/wcmd.htm

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 43bb07f798ffd654fe00913d4f37cd8c7736d1c4e1830b8cdedef844a95f794bN
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections