General
-
Target
94eb52d95cf1611e2dba70793890a0db93ae5a21c8ce15ffd28e391d8420caecN.exe
-
Size
344KB
-
Sample
241111-p46b5szdke
-
MD5
640a814a639bf022385b05e8750c1e09
-
SHA1
c1603db0afdb98afb7a201020404466b99c1cba1
-
SHA256
71b89865585ee6eff955656a427770b338875aad2cbed0304e3af3f24c995aad
-
SHA512
1029ee248abeca8b7547ce44513008979a7e37990ce996125060f17ba50c43a67d50ae54d2f9a10757bee65edf09f8cd48194395c86dad1ab820173c43d1fc08
-
SSDEEP
6144:KQ840t1X9wTRACpX2/mnbzvdLaD6OkPgl6bmIjlQFx:X840t1NwTyCpXImbzQD6OkPgl6bmIjKx
Static task
static1
Behavioral task
behavioral1
Sample
94eb52d95cf1611e2dba70793890a0db93ae5a21c8ce15ffd28e391d8420caecN.exe
Resource
win7-20241023-en
Behavioral task
behavioral2
Sample
94eb52d95cf1611e2dba70793890a0db93ae5a21c8ce15ffd28e391d8420caecN.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
berbew
http://tat-neftbank.ru/kkq.php
http://tat-neftbank.ru/wcmd.htm
Targets
-
-
Target
94eb52d95cf1611e2dba70793890a0db93ae5a21c8ce15ffd28e391d8420caecN.exe
-
Size
344KB
-
MD5
640a814a639bf022385b05e8750c1e09
-
SHA1
c1603db0afdb98afb7a201020404466b99c1cba1
-
SHA256
71b89865585ee6eff955656a427770b338875aad2cbed0304e3af3f24c995aad
-
SHA512
1029ee248abeca8b7547ce44513008979a7e37990ce996125060f17ba50c43a67d50ae54d2f9a10757bee65edf09f8cd48194395c86dad1ab820173c43d1fc08
-
SSDEEP
6144:KQ840t1X9wTRACpX2/mnbzvdLaD6OkPgl6bmIjlQFx:X840t1NwTyCpXImbzQD6OkPgl6bmIjKx
Score10/10-
Adds autorun key to be loaded by Explorer.exe on startup
-
Berbew family
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-