General

  • Target

    18d63cd2798db92776386dcffe37c5ff1b4e222e8d929c210da94581da2d2a0f

  • Size

    250KB

  • MD5

    8b8c6309d211814c0ff603cc157dc798

  • SHA1

    2b8e2442294cedbc583ea94525db40062028f3b1

  • SHA256

    18d63cd2798db92776386dcffe37c5ff1b4e222e8d929c210da94581da2d2a0f

  • SHA512

    679265d396fb3316f7fa4425fff0a739b1b556adc98798fd3bb1d9b166ecf4aede5ba757664ac2a7e06f360b2c750472d29539f1fd5f78f0ebb829304955deb5

  • SSDEEP

    6144:/SvcyDvCvfmZ7KRRRGBCvfmZ7KFpNlJTBCvfmZ7d:/Iy

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://tat-neftbank.ru/kkq.php

http://tat-neftbank.ru/wcmd.htm

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 18d63cd2798db92776386dcffe37c5ff1b4e222e8d929c210da94581da2d2a0f
    .exe windows:1 windows x86 arch:x86

    95e6f8741083e0c7d9a63d45e2472360


    Headers

    Imports

    Sections