General

  • Target

    NEAS.f237a0372b522b422c2d2ccbf41b6c70.exe

  • Size

    286KB

  • MD5

    f237a0372b522b422c2d2ccbf41b6c70

  • SHA1

    28bb8e3dd31d1abb810937a3014127c503778ccf

  • SHA256

    4cfc28ceb3b6dd2bc8dc36155cd1cf518f3e620ea892d96238a71d487e3dbde6

  • SHA512

    1d2acd5d28b9208faf248c5ec31ff405211731a1caebff06ed23e412fda2b33b3f935395289ae17afe7e90bbe604697bfb4d5368b11d68d77c4cfe918a574853

  • SSDEEP

    6144:ccm4FmowdHoSQkuObHq9ltAszBd+za/p1slTjZXvEQo9dftOX:K4wFHoSQkuUHk1zBR/pMT9XvEhdfO

Malware Config

Signatures

  • Berbew family
  • Malware Backdoor - Berbew 1 IoCs

    Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.f237a0372b522b422c2d2ccbf41b6c70.exe
    .exe windows:4 windows x86


    Headers

    Sections