General

  • Target

    20dbfead583ec1e5424a1ee3ba1615ad71e3ef4559eedb5f83536743a624a2f1

  • Size

    182KB

  • MD5

    487d9bca2be69f77d9d1b9c45ff02137

  • SHA1

    4bd9d3e19c135dcd9243d063b678a72653c43fd4

  • SHA256

    20dbfead583ec1e5424a1ee3ba1615ad71e3ef4559eedb5f83536743a624a2f1

  • SHA512

    1003ec979b2e24d867e505d2e2db85a64c7f2b467cf2e8f7f88d852c7d2c9462603c634bced7a57a95e9cdb8666480b19e9ebdb5b106431f3ad20d08be41838c

  • SSDEEP

    3072:uCBdqWH+X24ho1mtye3lFDrFDHZtOga24ho1mtye3l:ugqM+ksFj5tT3sF

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://tat-neftbank.ru/kkq.php

http://tat-neftbank.ru/wcmd.htm

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 20dbfead583ec1e5424a1ee3ba1615ad71e3ef4559eedb5f83536743a624a2f1
    .exe windows:1 windows x86 arch:x86

    95e6f8741083e0c7d9a63d45e2472360


    Headers

    Imports

    Sections