General

  • Target

    4f0062961db0f58d5608c91f91f3e7c8929f137bcd1b941451d644828fb8f843

  • Size

    194KB

  • MD5

    c647eb4d638eaac1b4e0f1260b6fd1c2

  • SHA1

    7d10d9a767836b1b04f256a614f294bc64d0d9bb

  • SHA256

    4f0062961db0f58d5608c91f91f3e7c8929f137bcd1b941451d644828fb8f843

  • SHA512

    fc5a6047c703abe4e3f3e884cb19ee9906c35b676e3c5a695628806939e39be09389d7956fb305d08277c6427ccc0d9e003f1a107e102fb3d16c1249d53ae94d

  • SSDEEP

    1536:UGvoSIs+pD+phGQxZatMIM/5/KEatMIGuatMIc/zT4a5GV:n1wplQXmMIM/kEmMIGumMIc/1GV

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://tat-neftbank.ru/kkq.php

http://tat-neftbank.ru/wcmd.htm

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4f0062961db0f58d5608c91f91f3e7c8929f137bcd1b941451d644828fb8f843
    .exe windows:1 windows x86 arch:x86

    95e6f8741083e0c7d9a63d45e2472360


    Headers

    Imports

    Sections