General
-
Target
4a9b36a6221d80d69cc2bc816b1fdfd123d55134fa924c78e2247baf19940a2cN
-
Size
97KB
-
Sample
241107-hgbqpaxerd
-
MD5
5f83ad319a6ed378f81ae3fba378a460
-
SHA1
e3602c8f9d7e91da5fd18cdbd289c759a5700d3d
-
SHA256
4a9b36a6221d80d69cc2bc816b1fdfd123d55134fa924c78e2247baf19940a2c
-
SHA512
fa5767dee29a604630f81dc7315ca399bd8bad3f28a259b1058289ca29555d43f4d56bf74fe554d9ad621619bb2ad78388188477856636ca3fcb0d0472442787
-
SSDEEP
1536:YNqWk7PURt6VeurRaswZ3RVjXUwXfzwE57pvJXeYZ6:Yft6VNR6RVHPzwm7pJXeK6
Static task
static1
Behavioral task
behavioral1
Sample
4a9b36a6221d80d69cc2bc816b1fdfd123d55134fa924c78e2247baf19940a2cN.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
4a9b36a6221d80d69cc2bc816b1fdfd123d55134fa924c78e2247baf19940a2cN.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
berbew
http://tat-neftbank.ru/kkq.php
http://tat-neftbank.ru/wcmd.htm
Targets
-
-
Target
4a9b36a6221d80d69cc2bc816b1fdfd123d55134fa924c78e2247baf19940a2cN
-
Size
97KB
-
MD5
5f83ad319a6ed378f81ae3fba378a460
-
SHA1
e3602c8f9d7e91da5fd18cdbd289c759a5700d3d
-
SHA256
4a9b36a6221d80d69cc2bc816b1fdfd123d55134fa924c78e2247baf19940a2c
-
SHA512
fa5767dee29a604630f81dc7315ca399bd8bad3f28a259b1058289ca29555d43f4d56bf74fe554d9ad621619bb2ad78388188477856636ca3fcb0d0472442787
-
SSDEEP
1536:YNqWk7PURt6VeurRaswZ3RVjXUwXfzwE57pvJXeYZ6:Yft6VNR6RVHPzwm7pJXeK6
Score10/10-
Adds autorun key to be loaded by Explorer.exe on startup
-
Berbew family
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-