General

  • Target

    404047c0d0c60aa9367006f37657d8101efd2f88e18c20214dc767678b7e42e5N.exe

  • Size

    428KB

  • MD5

    bfd02fc492e9098ff5427abf5dd2d520

  • SHA1

    357c5caa25eb0669c05e3f5f2a8ca952da28b6d2

  • SHA256

    404047c0d0c60aa9367006f37657d8101efd2f88e18c20214dc767678b7e42e5

  • SHA512

    8eaf5031c9f7a9c40c3584d9b93f3b94182863b74e587069675aee944342e44639644e964f56396112093a063f15a2956765e215bc6bbb26ba52ae5f394c5990

  • SSDEEP

    6144:whfLv+5ZXZuKVp1fNrNF5ZXZ7SEJtKa4sFj5tPNki9HZd1sFj5tQ:4fq5hjtFrNF5h0EJtws15tPWu5Ls15tQ

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://tat-neftbank.ru/kkq.php

http://tat-neftbank.ru/wcmd.htm

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 404047c0d0c60aa9367006f37657d8101efd2f88e18c20214dc767678b7e42e5N.exe
    .exe windows:1 windows x86 arch:x86

    95e6f8741083e0c7d9a63d45e2472360


    Headers

    Imports

    Sections