General

  • Target

    e80cf3a219ec4beb86f0d7b18c7ee12ff2e6be5ff17a6cbe22533fd855de2139N.exe

  • Size

    128KB

  • MD5

    d13ccabea2d37a86a053e65986ba1de0

  • SHA1

    e28d7bec657566bb7fc61b1f3d64d0ffdfd841f4

  • SHA256

    e80cf3a219ec4beb86f0d7b18c7ee12ff2e6be5ff17a6cbe22533fd855de2139

  • SHA512

    8f9da561a36f84336a361dac84f59126e741ccb1c780d9a2a18674b8bbc4a0a34df87c8e6438cd64793f7594f5b50f06dab641e917edb6c34b756e151e2825fb

  • SSDEEP

    3072:c9hBnEdCDrFDHZtOgxBOXXwwfBoD6N3h8N5Gg:OBnEdK5tTDUZNSN57

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://tat-neftbank.ru/kkq.php

http://tat-neftbank.ru/wcmd.htm

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • e80cf3a219ec4beb86f0d7b18c7ee12ff2e6be5ff17a6cbe22533fd855de2139N.exe
    .exe windows:1 windows x86 arch:x86

    95e6f8741083e0c7d9a63d45e2472360


    Headers

    Imports

    Sections