General
-
Target
b31faac8a528ebb297cddbf2defa6f4ab4e4f682e44b362afaaaaf9757aa6ee4N
-
Size
363KB
-
Sample
241107-hhvvyszpbm
-
MD5
7c3e2b86e88ded54c8017655624e6140
-
SHA1
0cd829fe20d81823ec7a20276d65267910bdcf2a
-
SHA256
b31faac8a528ebb297cddbf2defa6f4ab4e4f682e44b362afaaaaf9757aa6ee4
-
SHA512
f624d9cb05b414e10fe026f9683b9615fc5a098e53983a21b3d9ca537131deb7e073cb733ba7058e28b1f2c5e6f27efe6684da2a159e8af8897e9841e5684022
-
SSDEEP
6144:oJ0UqVU5tTbVXksax8n5tTDUZNSN58VU5tT:oqG5tP6sus5t6NSN6G5t
Static task
static1
Behavioral task
behavioral1
Sample
b31faac8a528ebb297cddbf2defa6f4ab4e4f682e44b362afaaaaf9757aa6ee4N.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
b31faac8a528ebb297cddbf2defa6f4ab4e4f682e44b362afaaaaf9757aa6ee4N.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
berbew
http://tat-neftbank.ru/kkq.php
http://tat-neftbank.ru/wcmd.htm
Targets
-
-
Target
b31faac8a528ebb297cddbf2defa6f4ab4e4f682e44b362afaaaaf9757aa6ee4N
-
Size
363KB
-
MD5
7c3e2b86e88ded54c8017655624e6140
-
SHA1
0cd829fe20d81823ec7a20276d65267910bdcf2a
-
SHA256
b31faac8a528ebb297cddbf2defa6f4ab4e4f682e44b362afaaaaf9757aa6ee4
-
SHA512
f624d9cb05b414e10fe026f9683b9615fc5a098e53983a21b3d9ca537131deb7e073cb733ba7058e28b1f2c5e6f27efe6684da2a159e8af8897e9841e5684022
-
SSDEEP
6144:oJ0UqVU5tTbVXksax8n5tTDUZNSN58VU5tT:oqG5tP6sus5t6NSN6G5t
Score10/10-
Adds autorun key to be loaded by Explorer.exe on startup
-
Berbew family
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-