General

  • Target

    0f3a8a87253338237abaceb60af223943467996a470093ed99c197cdaec44d41

  • Size

    128KB

  • MD5

    d0990c2f06cd82a7f685da93d50155c4

  • SHA1

    8124ac6db4d94e02f044dabfe0ea518ece236067

  • SHA256

    0f3a8a87253338237abaceb60af223943467996a470093ed99c197cdaec44d41

  • SHA512

    296dd47033972184360aaa23a4b7c6887498401dbb59077f7a1feead0f513abe7acada2da02606127333daf8adf2018ff5a223418a987b63f3cf5057aaea1002

  • SSDEEP

    3072:Fu7yMzJDuRGo2jiCREXdXNKT1ntPG9poDrFDHZtOgl:FuxzARt2jBCN9Otopg5tTl

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://tat-neftbank.ru/kkq.php

http://tat-neftbank.ru/wcmd.htm

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0f3a8a87253338237abaceb60af223943467996a470093ed99c197cdaec44d41
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections