General

  • Target

    1e1199fddd59303b4afd403362215ecf8fcc8032f9944834306020a87c6c4f1eN.exe

  • Size

    364KB

  • MD5

    accc016d6c4c2c4ed4e4db7c734c2690

  • SHA1

    e0af8e87e212373b4ff8d0eed9956ad6b890be6c

  • SHA256

    1e1199fddd59303b4afd403362215ecf8fcc8032f9944834306020a87c6c4f1e

  • SHA512

    c84113d0d6ab53bd7bdc2e80776c885af402f4ac5b3ca79ba429931daf3a2e865d6fec4fba6d9f738fb00e6a1af58d57497afeb78c37223969928bdf5b71394c

  • SSDEEP

    6144:2UlniHzXdX4PjsFj5tT3sFrqu+2KSnbXwBsFj5tT3sF:Ln1s15tLs93nbas15tLs

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://tat-neftbank.ru/kkq.php

http://tat-neftbank.ru/wcmd.htm

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1e1199fddd59303b4afd403362215ecf8fcc8032f9944834306020a87c6c4f1eN.exe
    .exe windows:1 windows x86 arch:x86

    95e6f8741083e0c7d9a63d45e2472360


    Headers

    Imports

    Sections