General

  • Target

    627b64de128eaa336be316b5bde60df69cc8a90a7c773f6d0e2138fd286908ffN.exe

  • Size

    113KB

  • MD5

    d4e7c6c0e49675e2951639b4f78a7680

  • SHA1

    8fb028c07e41aac3b506c612b6f866492a13ac33

  • SHA256

    627b64de128eaa336be316b5bde60df69cc8a90a7c773f6d0e2138fd286908ff

  • SHA512

    f20e7d0c566378c7e93c6de264b60d87bafa45846306af33a7c86f9b2fb8b57e935d4861f35e4caa3c61be1d9161494ad637fd4038260b6b6444f244997d9795

  • SSDEEP

    3072:cA2T6ueIhEip5GOuGkZFfFSebHWrH8wTW0:3ueIDp5b7otSeWrP

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://tat-neftbank.ru/kkq.php

http://tat-neftbank.ru/wcmd.htm

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 627b64de128eaa336be316b5bde60df69cc8a90a7c773f6d0e2138fd286908ffN.exe
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections