General

  • Target

    a3543ca7dca7fbbaea548ab109ea73c2833b75597a646af15573532510ccec80N

  • Size

    101KB

  • MD5

    b48ce9483ae29c1761e1806d12ef7380

  • SHA1

    daa503e375fb07f189afe9e6f06d8e2ff70ed20f

  • SHA256

    a3543ca7dca7fbbaea548ab109ea73c2833b75597a646af15573532510ccec80

  • SHA512

    2a52962d9316b4e1253750e42e1d822f99e00ca2dcde6b0162e89adee1dfc21f51a3c5b09033bd2c532495a238041fce25fdff56d0e64298d61b33d89668016a

  • SSDEEP

    3072:xH/QSX0uZBvvsxUEduXqbyu0sY7q5AnrHY4vDX:tQSk0wUj853Anr44vDX

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://tat-neftbank.ru/kkq.php

http://tat-neftbank.ru/wcmd.htm

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a3543ca7dca7fbbaea548ab109ea73c2833b75597a646af15573532510ccec80N
    .exe windows:1 windows x86 arch:x86

    95e6f8741083e0c7d9a63d45e2472360


    Headers

    Imports

    Sections