General
-
Target
47ba25e0bcf99b87a5fe383d00f2206cc2a9f9b3679553a6f96832a1f2319796N
-
Size
64KB
-
Sample
241110-p76gbazphr
-
MD5
3cef89ea426da8c3fe75d8ab212870f0
-
SHA1
5628bf8aa13dd93e6b1c418b34b6c2bd05bcc4ea
-
SHA256
47ba25e0bcf99b87a5fe383d00f2206cc2a9f9b3679553a6f96832a1f2319796
-
SHA512
a55e46e2755ed67dd5a3dcaa6975ceb31f7788d6a1c8ec63c315b94410a1145d63c8ade2fa096188912757ca7b2de568d6f806b89350cc4bf662edbc6e40902d
-
SSDEEP
1536:FDdQbtJJKB2RmSMzVuYXlE2S67WywhrPFW2iwTbW:FDdQbTnRmFZuYVEWX0FW2VTbW
Static task
static1
Behavioral task
behavioral1
Sample
47ba25e0bcf99b87a5fe383d00f2206cc2a9f9b3679553a6f96832a1f2319796N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
47ba25e0bcf99b87a5fe383d00f2206cc2a9f9b3679553a6f96832a1f2319796N.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
berbew
http://tat-neftbank.ru/kkq.php
http://tat-neftbank.ru/wcmd.htm
Targets
-
-
Target
47ba25e0bcf99b87a5fe383d00f2206cc2a9f9b3679553a6f96832a1f2319796N
-
Size
64KB
-
MD5
3cef89ea426da8c3fe75d8ab212870f0
-
SHA1
5628bf8aa13dd93e6b1c418b34b6c2bd05bcc4ea
-
SHA256
47ba25e0bcf99b87a5fe383d00f2206cc2a9f9b3679553a6f96832a1f2319796
-
SHA512
a55e46e2755ed67dd5a3dcaa6975ceb31f7788d6a1c8ec63c315b94410a1145d63c8ade2fa096188912757ca7b2de568d6f806b89350cc4bf662edbc6e40902d
-
SSDEEP
1536:FDdQbtJJKB2RmSMzVuYXlE2S67WywhrPFW2iwTbW:FDdQbTnRmFZuYVEWX0FW2VTbW
Score10/10-
Adds autorun key to be loaded by Explorer.exe on startup
-
Berbew family
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-