General

  • Target

    9684129969568ab07242820a7c98ee7edb946450423b393ce6311223d027e919

  • Size

    352KB

  • MD5

    e600a47f554078544367dbb421531b00

  • SHA1

    594e4f11a9ab3aeba4912da958c9c6b3702525b4

  • SHA256

    9684129969568ab07242820a7c98ee7edb946450423b393ce6311223d027e919

  • SHA512

    aa48c01951b8a363425894d59c78f6bbf8e6ffb4f2bbdda6fcbab6b8e7541139fbf1c4ba9999357ce81e543c1b01e3888723a52ef2c529ce1b8b4eaff4a7d55f

  • SSDEEP

    3072:q7/ZuIZGkalFyhREOJF4EISi/i4gG4nv4H3EzkGSaXiT+9S+a1+s3wNxn:q7/ZuOj54yjwHL/T7Gsyn

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://tat-neftbank.ru/kkq.php

http://tat-neftbank.ru/wcmd.htm

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 9684129969568ab07242820a7c98ee7edb946450423b393ce6311223d027e919
    .exe windows:1 windows x86 arch:x86

    95e6f8741083e0c7d9a63d45e2472360


    Headers

    Imports

    Sections