General

  • Target

    13480b2ff815efe550c049a6441d37ed981bb2f071b12b03122f0fbb88f2ad7f

  • Size

    181KB

  • MD5

    c1812bb16a685b665b1a00cb676b2217

  • SHA1

    03af053a357b024b05495fb737fe69c5be65df28

  • SHA256

    13480b2ff815efe550c049a6441d37ed981bb2f071b12b03122f0fbb88f2ad7f

  • SHA512

    9e77a9458a32cdad613df480c7dd57977684243faab06f4b91937059550b19bce38caae48e8b816b3809c3b236ef87be89d415d4d938987acd43eb62424af96a

  • SSDEEP

    3072:KXyMxbJDrFDHZtOg04UxSl4uO0JGDrFDHZtOg:KXyM5/5tTh7G0JW5tT

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://tat-neftbank.ru/kkq.php

http://tat-neftbank.ru/wcmd.htm

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 13480b2ff815efe550c049a6441d37ed981bb2f071b12b03122f0fbb88f2ad7f
    .exe windows:1 windows x86 arch:x86

    95e6f8741083e0c7d9a63d45e2472360


    Headers

    Imports

    Sections