General

  • Target

    NEAS.f1f7376fdc5713c1d40ddf999ed31190.exe

  • Size

    514KB

  • MD5

    f1f7376fdc5713c1d40ddf999ed31190

  • SHA1

    e31290c9ad5b67f959b5aba7bc318438b884570c

  • SHA256

    732230f91f89f0eb68b8f866240605565c8cd6f0636b8c3f0289a4039085c139

  • SHA512

    0750f61f0227a931c32ade118bef2b0cef33de20c35bb10c55240bc46ff448ba4f8579a11a9dac80de65a25307a0580b35fcaef52dc28874c0d1241635167a0f

  • SSDEEP

    12288:N4wFHoSMu49P9mPh2kkkkK4kXkkkkkkkkl888888888888888888n9:Cu49lmPh2kkkkK4kXkkkkkkkkb

Malware Config

Signatures

  • Berbew family
  • Malware Backdoor - Berbew 1 IoCs

    Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.f1f7376fdc5713c1d40ddf999ed31190.exe
    .exe windows:4 windows x86


    Headers

    Sections