General

  • Target

    b9a5a23a0e5608400100ba892782610a665b80b98ea24a4cdc0b372543897962

  • Size

    395KB

  • MD5

    a5513ecb11333b54e0bf4dd0bc33f086

  • SHA1

    8345d1f3ec1051075023ad9cca0b7bc026b36b84

  • SHA256

    b9a5a23a0e5608400100ba892782610a665b80b98ea24a4cdc0b372543897962

  • SHA512

    83dae865f52971719d103f8d85907ec43c175e5cbaf73388daf7517fadd985137d7cd66ab1e997cde18a544b563e289a2a178462d7c5f9d3239bcc502f0a12a2

  • SSDEEP

    6144:0YoNhtrts4y70u4HXs4yr0u490u4Ds4yvW8l0:RoNhtW4O0dHc4i0d90dA4t

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://tat-neftbank.ru/kkq.php

http://tat-neftbank.ru/wcmd.htm

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b9a5a23a0e5608400100ba892782610a665b80b98ea24a4cdc0b372543897962
    .exe windows:1 windows x86 arch:x86

    95e6f8741083e0c7d9a63d45e2472360


    Headers

    Imports

    Sections