General

  • Target

    NEAS.fb1ec1b2308ea5700f67b0120608ff50.exe

  • Size

    459KB

  • MD5

    fb1ec1b2308ea5700f67b0120608ff50

  • SHA1

    f79ec774ea113545b2c8ff83e962767349f64a02

  • SHA256

    c0b4551763f790c5aa69982d1d6d228f9def06c68556767d0fa26177a281c10a

  • SHA512

    4c805e8c8a9303c4a9e3ebc4b7327bfc974c99b39191498d8d02c6b6fa1d6b4bbc5a2a7d9ccb5cd87ec8bb726fca0fef4dae642743e4e7885fa8646927fbe7a6

  • SSDEEP

    12288:J4wFHoSTeR0oQRkay+eFp3IDvSbh5nPVP+OKaf1VQ:VeR0oykayRFp3lztP+OKaf1VQ

Malware Config

Signatures

  • Berbew family
  • Malware Backdoor - Berbew 1 IoCs

    Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.fb1ec1b2308ea5700f67b0120608ff50.exe
    .exe windows:4 windows x86


    Headers

    Sections