General

  • Target

    84fa19a7a371bdc88a1a812bbea9b0293c8a5c09ea62af46a424d507a898bb9c

  • Size

    181KB

  • MD5

    ce6d730650348b195d3a4c37abca0c59

  • SHA1

    77cd2c6a0fcae7fb397a9248f45ee06287b0d276

  • SHA256

    84fa19a7a371bdc88a1a812bbea9b0293c8a5c09ea62af46a424d507a898bb9c

  • SHA512

    8b224b4b44f034e0ca853cac5fe38d726d66d99993b8ef4991262275f634cdd4540a2130edee88d151ae2fdcc9fbd3b585fbebfe7794ebaafe786526998c66bf

  • SSDEEP

    3072:nKFgvwKnKFwlg1YFKsODrFDHZtOg04UxSl4uO0JGDrFDHZtOg:nKFgLnKFwl7Fx+5tTh7G0JW5tT

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://tat-neftbank.ru/kkq.php

http://tat-neftbank.ru/wcmd.htm

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 84fa19a7a371bdc88a1a812bbea9b0293c8a5c09ea62af46a424d507a898bb9c
    .exe windows:1 windows x86 arch:x86

    95e6f8741083e0c7d9a63d45e2472360


    Headers

    Imports

    Sections