General
-
Target
b4d571da3a1a03f55feeaa35bad7fd26a318483216c6b68fdb389bb19135e836
-
Size
352KB
-
Sample
241107-dzsdyatlgv
-
MD5
0de549a91a064e9d497fcf7247ae6815
-
SHA1
13fe3173b669c9b85facbb87b6f3816bdf0a255b
-
SHA256
b4d571da3a1a03f55feeaa35bad7fd26a318483216c6b68fdb389bb19135e836
-
SHA512
ee507ef7818c4d35fe18f3b98d568b1e969c1f5ef051fed8a1a5db2767434f08af692540d51407d95e01f19a50d1ac0f13547e061377bf4c5aed4c6285869676
-
SSDEEP
3072:ZExQwmyOGMbwnKupqOJF4EISi/i4gG4nv4H3EzkGSaXiT+9S+a1+s3wNxn:KKTyOVMn3pD4yjwHL/T7Gsyn
Static task
static1
Behavioral task
behavioral1
Sample
b4d571da3a1a03f55feeaa35bad7fd26a318483216c6b68fdb389bb19135e836.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
b4d571da3a1a03f55feeaa35bad7fd26a318483216c6b68fdb389bb19135e836.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
berbew
http://tat-neftbank.ru/kkq.php
http://tat-neftbank.ru/wcmd.htm
Targets
-
-
Target
b4d571da3a1a03f55feeaa35bad7fd26a318483216c6b68fdb389bb19135e836
-
Size
352KB
-
MD5
0de549a91a064e9d497fcf7247ae6815
-
SHA1
13fe3173b669c9b85facbb87b6f3816bdf0a255b
-
SHA256
b4d571da3a1a03f55feeaa35bad7fd26a318483216c6b68fdb389bb19135e836
-
SHA512
ee507ef7818c4d35fe18f3b98d568b1e969c1f5ef051fed8a1a5db2767434f08af692540d51407d95e01f19a50d1ac0f13547e061377bf4c5aed4c6285869676
-
SSDEEP
3072:ZExQwmyOGMbwnKupqOJF4EISi/i4gG4nv4H3EzkGSaXiT+9S+a1+s3wNxn:KKTyOVMn3pD4yjwHL/T7Gsyn
Score10/10-
Adds autorun key to be loaded by Explorer.exe on startup
-
Berbew family
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-