General

  • Target

    5176d970544dda26dabceb610d067fff65d80282d299b57d10e173c4788c9e51.exe

  • Size

    465KB

  • MD5

    92a9dcb71b9f980994d2d2b121a8e939

  • SHA1

    e19a23a0919315dfb76eda1a23d544e96d7ac29c

  • SHA256

    5176d970544dda26dabceb610d067fff65d80282d299b57d10e173c4788c9e51

  • SHA512

    9ef13711158a6910bc255b4869bd69567ab7faeda33e0c1a8da79e6e5fdc1063c1481b070d6194cc1112dda26defaf64e22d1a38aa6c88603d1f52b073d5d826

  • SSDEEP

    6144:PxiM5AEhwqOOVF5V4lKjIbvBhRJfzSf9x7N/I7b9M:PMM5AErO8LKlUmpRe94a

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://tat-neftbank.ru/kkq.php

http://tat-neftbank.ru/wcmd.htm

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 5176d970544dda26dabceb610d067fff65d80282d299b57d10e173c4788c9e51.exe
    .exe windows:1 windows x86 arch:x86

    95e6f8741083e0c7d9a63d45e2472360


    Headers

    Imports

    Sections