General

  • Target

    f6c613b0e534f8cc76379e7a0136c336f4a16c4fcf12289154e82aded04111e6N.exe

  • Size

    219KB

  • MD5

    da118d6da3407c040c4177bb87f01280

  • SHA1

    96ed342bcb4c778b81f67f1b79829b7f8a239b13

  • SHA256

    f6c613b0e534f8cc76379e7a0136c336f4a16c4fcf12289154e82aded04111e6

  • SHA512

    467dfe54976a1e2897e6861ae4d192b1f432343435bf335922fa34fbb15577dd129c421fec0c9f57ab8c78229248aadc24b6ea0b15946c3cbc2b0bf58e568623

  • SSDEEP

    3072:V9tW4aN625i4JPzwuZkO0aDb/IBPCOQvU6z314EXrjvwSfYrwBt:V90U2BRzDOO0aDD4PCxdXXwSfYrwB

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://tat-neftbank.ru/kkq.php

http://tat-neftbank.ru/wcmd.htm

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f6c613b0e534f8cc76379e7a0136c336f4a16c4fcf12289154e82aded04111e6N.exe
    .exe windows:1 windows x86 arch:x86

    95e6f8741083e0c7d9a63d45e2472360


    Headers

    Imports

    Sections