General
-
Target
e1850fea2e78ce5ba82cf1c5bc0cb7809c44ea81187bcdede1823c40073e8ea1N
-
Size
226KB
-
Sample
241107-kmt6bs1rep
-
MD5
e2c257413f74f74694896e018b22d990
-
SHA1
08f01f6cc50cdbadb27d21175ad61ecbe1939503
-
SHA256
e1850fea2e78ce5ba82cf1c5bc0cb7809c44ea81187bcdede1823c40073e8ea1
-
SHA512
5edc8841b3b0bb736e66bbb4bf6f112c6d11da8303c486dda36289dbeab581c5b90939889b62f8d4d3fdbe8e97588036dc2eb45bfcdfedd62b7acc697adc33fc
-
SSDEEP
3072:HgK/eh8eDKcWmjRvDKcpDKcWmjRrzNtQtjDKcWmjRrzNtb:9E8fxEtQtsEtb
Behavioral task
behavioral1
Sample
e1850fea2e78ce5ba82cf1c5bc0cb7809c44ea81187bcdede1823c40073e8ea1N.exe
Resource
win7-20241023-en
Behavioral task
behavioral2
Sample
e1850fea2e78ce5ba82cf1c5bc0cb7809c44ea81187bcdede1823c40073e8ea1N.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
berbew
http://tat-neftbank.ru/kkq.php
http://tat-neftbank.ru/wcmd.htm
Targets
-
-
Target
e1850fea2e78ce5ba82cf1c5bc0cb7809c44ea81187bcdede1823c40073e8ea1N
-
Size
226KB
-
MD5
e2c257413f74f74694896e018b22d990
-
SHA1
08f01f6cc50cdbadb27d21175ad61ecbe1939503
-
SHA256
e1850fea2e78ce5ba82cf1c5bc0cb7809c44ea81187bcdede1823c40073e8ea1
-
SHA512
5edc8841b3b0bb736e66bbb4bf6f112c6d11da8303c486dda36289dbeab581c5b90939889b62f8d4d3fdbe8e97588036dc2eb45bfcdfedd62b7acc697adc33fc
-
SSDEEP
3072:HgK/eh8eDKcWmjRvDKcpDKcWmjRrzNtQtjDKcWmjRrzNtb:9E8fxEtQtsEtb
Score10/10-
Adds autorun key to be loaded by Explorer.exe on startup
-
Berbew family
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-