General

  • Target

    33072e7e4029f749519f5003d03ddc8c699958ae8b6d71e36f6745f8d1fa07da

  • Size

    395KB

  • MD5

    f7b838eb6ed156861f78e28531a766e5

  • SHA1

    dd661aaf87cc40de09f70e8cffa14fa642ab4224

  • SHA256

    33072e7e4029f749519f5003d03ddc8c699958ae8b6d71e36f6745f8d1fa07da

  • SHA512

    b33396cae84bb4ef4d8eedc0ef306072f6d8e22b0e3b4357939fd5789c17f7cddfc047a2b874ede0d131d0ddf5f96ca0c9ab3bc3a37e1bdc97aa601f655b1c54

  • SSDEEP

    6144:Ya0Lr/is4y70u4HXs4yr0u490u4Ds4yvW8lM:5wV4O0dHc4i0d90dA4X

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://tat-neftbank.ru/kkq.php

http://tat-neftbank.ru/wcmd.htm

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 33072e7e4029f749519f5003d03ddc8c699958ae8b6d71e36f6745f8d1fa07da
    .exe windows:1 windows x86 arch:x86

    95e6f8741083e0c7d9a63d45e2472360


    Headers

    Imports

    Sections