General

  • Target

    f78657fe3f1488347207e3fe3ce339669646bd7d296afb6bf2227ff34c7f6315N.exe

  • Size

    395KB

  • MD5

    0c495ea406a2fd18dd4a83fe050d3240

  • SHA1

    d8f2d9240119711b448b6e11a5f2d784287739b7

  • SHA256

    f78657fe3f1488347207e3fe3ce339669646bd7d296afb6bf2227ff34c7f6315

  • SHA512

    c012f7cf74a7493fa396ec4d76b911dffe6ce953f4e6718babeb6de3787ca6110505552467af9c36a67d981a4eab8747c914434b0f3cc399f94a4501e5b65559

  • SSDEEP

    6144:MrS6BCRs4y70u4HXs4yr0u490u4Ds4yvW8lM:Uxt4O0dHc4i0d90dA4P

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://tat-neftbank.ru/kkq.php

http://tat-neftbank.ru/wcmd.htm

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f78657fe3f1488347207e3fe3ce339669646bd7d296afb6bf2227ff34c7f6315N.exe
    .exe windows:1 windows x86 arch:x86

    95e6f8741083e0c7d9a63d45e2472360


    Headers

    Imports

    Sections