General

  • Target

    28471036171165e9f654d46639f75ae969f0caade9b7d71f2b94129c1229d835N.exe

  • Size

    142KB

  • MD5

    144004f60e0953ac602df01417017ec0

  • SHA1

    71ecbda38ac7608638cac37492d85ac4902710b3

  • SHA256

    28471036171165e9f654d46639f75ae969f0caade9b7d71f2b94129c1229d835

  • SHA512

    1973d8b234b1f1d7ca7e8cb04e3c795ccf90bc5e944e79c71d3844b86cfcab5191c81712da861cdf92950b36c44ddb6b758ea5ce59960cfcb47c6572ea00f0c9

  • SSDEEP

    3072:H3ry6yc2mgV9oleLTkDjY5L3a3jg0DihKjgUDLjBQ7/OuOXNxrXTkDjY5U:H326pD0LTGjYF3azNPXPXTGjYe

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://tat-neftbank.ru/kkq.php

http://tat-neftbank.ru/wcmd.htm

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 28471036171165e9f654d46639f75ae969f0caade9b7d71f2b94129c1229d835N.exe
    .exe windows:1 windows x86 arch:x86

    95e6f8741083e0c7d9a63d45e2472360


    Headers

    Imports

    Sections