General
-
Target
abaf9bded8f04062003cd9134e03f2809bbb70807719fafe53b647de60750e55
-
Size
69KB
-
Sample
241223-cewp7atqcj
-
MD5
cc90f4ddb50daa38e4b1d69a9ebbfa9b
-
SHA1
2cf75bc6b5dce032907e04deaeb42b99e3c770fd
-
SHA256
abaf9bded8f04062003cd9134e03f2809bbb70807719fafe53b647de60750e55
-
SHA512
655d2be1e37bc401cc021f9e80da1c29e3106f085697347aaa081db164b4c3ee105214be1bd66105db7958a4a9e357e0307a3307cf1ac82f5cfb0a319a75606f
-
SSDEEP
1536:fCMzxwyNvc6tR4AZZAwOzNein/GFZCeDAyY:5wy+6ZZAwOzNFn/GFZC1yY
Static task
static1
Behavioral task
behavioral1
Sample
abaf9bded8f04062003cd9134e03f2809bbb70807719fafe53b647de60750e55.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
abaf9bded8f04062003cd9134e03f2809bbb70807719fafe53b647de60750e55.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
berbew
http://tat-neftbank.ru/kkq.php
http://tat-neftbank.ru/wcmd.htm
Targets
-
-
Target
abaf9bded8f04062003cd9134e03f2809bbb70807719fafe53b647de60750e55
-
Size
69KB
-
MD5
cc90f4ddb50daa38e4b1d69a9ebbfa9b
-
SHA1
2cf75bc6b5dce032907e04deaeb42b99e3c770fd
-
SHA256
abaf9bded8f04062003cd9134e03f2809bbb70807719fafe53b647de60750e55
-
SHA512
655d2be1e37bc401cc021f9e80da1c29e3106f085697347aaa081db164b4c3ee105214be1bd66105db7958a4a9e357e0307a3307cf1ac82f5cfb0a319a75606f
-
SSDEEP
1536:fCMzxwyNvc6tR4AZZAwOzNein/GFZCeDAyY:5wy+6ZZAwOzNFn/GFZC1yY
Score10/10-
Adds autorun key to be loaded by Explorer.exe on startup
-
Berbew family
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-