General

  • Target

    NEAS.d8d2a4c5eb058c402e17f3cfe39906b0.exe

  • Size

    311KB

  • MD5

    d8d2a4c5eb058c402e17f3cfe39906b0

  • SHA1

    89a3083371ee82018f0b4170d3bcbcaa8d0f6994

  • SHA256

    5efa9ec80a5c6697f57092bbfb071d790f3809727aa1191a15f7b3ce03a6c091

  • SHA512

    f518daf8905b63ab59247c9c3cab86b2202f546e9a6a2e170cdd7299358562faa35075f38ad7713c5b192bee0ca87cbcb2e180bbc45fbe3ba0a3c4c1d7083943

  • SSDEEP

    6144:0USiZTK40qIs9GQnp+ljF+JSV2EHh3RSj0LUxEA/+gQzQfFnUD+ehocGIRbhosPZ:0UvRK4T9jp+1NV2EHh3RSILcE+9QzQpe

Malware Config

Signatures

  • Berbew family
  • Malware Backdoor - Berbew 1 IoCs

    Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.d8d2a4c5eb058c402e17f3cfe39906b0.exe
    .exe windows:4 windows x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86


    Headers

    Sections