General

  • Target

    85bbcc60ce36be5a9f6b6992796f2ce99d2edb69f2d7194a5c11ed75dae2cdd3

  • Size

    264KB

  • MD5

    c0b619b5d7711ea4bf9ed61392534e6e

  • SHA1

    22b7e22dc25fb4deea7ea26000bf0d0ce17f908f

  • SHA256

    85bbcc60ce36be5a9f6b6992796f2ce99d2edb69f2d7194a5c11ed75dae2cdd3

  • SHA512

    da5d598b2cdaecf428335011a9e0da9d9bed70dd0f675f557fcc319ccbf22d88bd4fdae1f6b24ad61aed2b1385d29d6590f3867f68c27b98c99c98723b5f1c48

  • SSDEEP

    3072:I6fgkY5lF24ho1mtye3lFDrFDHZtO8jJkiUi8ChpBhx5Zd424ho1mtye3lFDrFDs:I6Y3jKsFj5tPNki9HZd1sFj5tw

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://tat-neftbank.ru/kkq.php

http://tat-neftbank.ru/wcmd.htm

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 85bbcc60ce36be5a9f6b6992796f2ce99d2edb69f2d7194a5c11ed75dae2cdd3
    .exe windows:1 windows x86 arch:x86

    95e6f8741083e0c7d9a63d45e2472360


    Headers

    Imports

    Sections