General

  • Target

    d149245021637f66604cedf711c680ea55a1d916f9325b2ea3003120d018e894

  • Size

    101KB

  • MD5

    a711a2467c80b584a331d6c9b9181f7a

  • SHA1

    b7b2556088ca51a4621781e6b6ebfb13bfd92752

  • SHA256

    d149245021637f66604cedf711c680ea55a1d916f9325b2ea3003120d018e894

  • SHA512

    481958d8e6d4aa7eb4261d22d303800f6ed2273dedae09c43e2f2f61609e073f5407feb97c8225607959206ea6ae5adbe708fd68f81755a2222ed06a72b5da23

  • SSDEEP

    3072:jYhglWrKX7VTE6PEduXqbyu0sY7q5AnrHY4vDX:jYhKWr87VTE6Pj853Anr44vDX

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://tat-neftbank.ru/kkq.php

http://tat-neftbank.ru/wcmd.htm

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d149245021637f66604cedf711c680ea55a1d916f9325b2ea3003120d018e894
    .exe windows:1 windows x86 arch:x86

    95e6f8741083e0c7d9a63d45e2472360


    Headers

    Imports

    Sections