General

  • Target

    NEAS.63882d081c2e92f724bc99731a175210.exe

  • Size

    217KB

  • MD5

    63882d081c2e92f724bc99731a175210

  • SHA1

    b8dd0be13cb6e3e161214238aa34b64c01802a18

  • SHA256

    6de9f9e4cc4eed373e9b6d1452d5fb6e8e60c240396b31d2bcedef7f36fb9445

  • SHA512

    2cac5cdedc4c5f75434fe5bc6b9c8b0a5c395b43f36ed2c9ad6e263c3de87fdf3ab35b2a4ddb27ac77400d7de0c2ad7262b09eaa586a68524a0a7647f475f42a

  • SSDEEP

    3072:mhOmTsF93UYfwC6GIoutqfJcldbn7U25yLd5tZEwTpjZzM+xoU66PEGvq4n:mcm4FmowdHoSqfJcgL5zE0zDxolUfv/n

Malware Config

Signatures

  • Berbew family
  • Malware Backdoor - Berbew 1 IoCs

    Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.63882d081c2e92f724bc99731a175210.exe
    .exe windows:4 windows x86


    Headers

    Sections