General

  • Target

    NEAS.2af28b616978879bb3f05c5483537100.exe

  • Size

    1.3MB

  • MD5

    2af28b616978879bb3f05c5483537100

  • SHA1

    3b5ff3610f82300f50958d99a42ea8951e93c57b

  • SHA256

    171ca886492911afea0baa4b5f5a3bfa8f65a9a5b3f3511dc50d2ea2fdcf656d

  • SHA512

    01cdcca3d87f68c0d27d744c8fa97c9415adf0b29b4f97df1ef87c6cb52ba576477e83883fbe78a02dbbf767cc790f1f91c69efd1c1aea02dffdbbd5f91e5978

  • SSDEEP

    24576:Cu49lmPh2kkkkK4kXkkkkkkkkhLX3a20R0v50+YNpsKv2EvZHp3oWsYZd:Cu4zobazR0vKLXZSYZd

Malware Config

Signatures

  • Berbew family
  • Malware Backdoor - Berbew 1 IoCs

    Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.2af28b616978879bb3f05c5483537100.exe
    .exe windows:4 windows x86


    Headers

    Sections