General

  • Target

    6216a2e3bae8eba48fcea0e363c97a6aabaab71f5916a4f08c552c6c099b3e2cN.exe

  • Size

    335KB

  • MD5

    fec71dd647ed53659e884080cda6f840

  • SHA1

    8780799c421b6cfb71638feb5a4aa95a7d6bea01

  • SHA256

    6216a2e3bae8eba48fcea0e363c97a6aabaab71f5916a4f08c552c6c099b3e2c

  • SHA512

    db2a34d2699c9e5ae7270ff61207750b9e44aa5c4f2f283f4d8ace78a1029c4899735f259322e675de7e4e31bcb35533ebe0530abfb9ea34915caaa64d22e7c4

  • SSDEEP

    6144:VnR1IRFKiAbL6qCkvLvwU/4qwvwU/4qvvwevwU/4q+vwk/4q7:WASy

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://tat-neftbank.ru/kkq.php

http://tat-neftbank.ru/wcmd.htm

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 6216a2e3bae8eba48fcea0e363c97a6aabaab71f5916a4f08c552c6c099b3e2cN.exe
    .exe windows:1 windows x86 arch:x86

    95e6f8741083e0c7d9a63d45e2472360


    Headers

    Imports

    Sections