Overview

overview

10

Static

static

10

42dce8f9f5...f9.exe

windows7-x64

10

42dce8f9f5...f9.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    42dce8f9f56093b8c2b11314065ba411d44b19cff2350878c7508555c16e37f9

  • Size

    415KB

  • MD5

    fcac13598b4407f83294fd8ceb5cb01c

  • SHA1

    38a0209f751201c37ca6b5749dccad8fd67c099b

  • SHA256

    42dce8f9f56093b8c2b11314065ba411d44b19cff2350878c7508555c16e37f9

  • SHA512

    f5751eb84dd2c445e0c73060dcbe0876b42ea03e8a87ca827a36486d89818d345e798058cb0324436a72d7afae5c7fd3f5778bc4636006449ca6d51e93786e52

  • SSDEEP

    12288:XyZoWj7NtInBBBBBBBBBBBBBBBBBBBBBBBBB0kfBBBBBBBBBBBBBBBBBBBBBBBBL:Oklp

Score
10/10
berbew

Malware Config

Extracted

Family

berbew

C2

http://tat-neftbank.ru/kkq.php

http://tat-neftbank.ru/wcmd.htm

Signatures

  • Berbew family
    berbew
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 42dce8f9f56093b8c2b11314065ba411d44b19cff2350878c7508555c16e37f9
    .exe windows:1 windows x86 arch:x86

    95e6f8741083e0c7d9a63d45e2472360


    Headers

    Imports

    Sections