General

  • Target

    ffaede333ad698084564323f01b31feff39d2c3ac4ca9f24dc5ef490316fdd2e

  • Size

    395KB

  • MD5

    b19ac82abed9369ff1c17b28149ac4b0

  • SHA1

    69c3ffe691fee73ae8499e38e5fe9793d36fa377

  • SHA256

    ffaede333ad698084564323f01b31feff39d2c3ac4ca9f24dc5ef490316fdd2e

  • SHA512

    d7016bfd7dc65e4a3164bc1156378f594976f3add074df2501f4e78449138567fa1b12aa1f25d9df18ee2b885d249b0c48088374551edf848ed3590774ad73dc

  • SSDEEP

    6144:F7Zp9hqRs4y70u4HXs4yr0u490u4Ds4yvW8l0:FX9hH4O0dHc4i0d90dA4t

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://tat-neftbank.ru/kkq.php

http://tat-neftbank.ru/wcmd.htm

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ffaede333ad698084564323f01b31feff39d2c3ac4ca9f24dc5ef490316fdd2e
    .exe windows:1 windows x86 arch:x86

    95e6f8741083e0c7d9a63d45e2472360


    Headers

    Imports

    Sections