General

  • Target

    2990f28cb99842897a0ea30b485fc3e4015d66fde5ac9a95d37ca352b85db441

  • Size

    428KB

  • MD5

    0c8f585ec21d50719b9da96cc24ea87a

  • SHA1

    02c404b49b40ed517213a65f622068bc5f22d29f

  • SHA256

    2990f28cb99842897a0ea30b485fc3e4015d66fde5ac9a95d37ca352b85db441

  • SHA512

    00efbd6997f76f60f77b7c61fab3117992e62757783ec19befae287d8c42b3700ef6df3334f9e01c46d2bbafe6872249f9c136a9158982607c3915051c810243

  • SSDEEP

    3072:aI7eZB/q4sDdR3Z8mnaoPav8Wz24ho1mtye3lFDrFDHZtO8jJkiUi8ChpBhx5ZdN:aI7GM35ba4sFj5tPNki9HZd1sFj5tA

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://tat-neftbank.ru/kkq.php

http://tat-neftbank.ru/wcmd.htm

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2990f28cb99842897a0ea30b485fc3e4015d66fde5ac9a95d37ca352b85db441
    .exe windows:1 windows x86 arch:x86

    95e6f8741083e0c7d9a63d45e2472360


    Headers

    Imports

    Sections