General

  • Target

    NEAS.402ea667ce8d2d7ed6ace6afe843d5f3.exe

  • Size

    168KB

  • MD5

    402ea667ce8d2d7ed6ace6afe843d5f3

  • SHA1

    e5466eac71088b2b70cbbf6476d770539db55c38

  • SHA256

    2f80f327762d73f60134d358be43bda68def9de2ad1140edeaba01fc93b359ae

  • SHA512

    a52eefb9a085c7cdba3f74a70a4ca67b6f26ed4c5b2d2cd1eafe3cf4dbad6f2c84a732eb64ff4bd13a8792e1bfe0b40629038ceadfe650f979b840b7adfc46a4

  • SSDEEP

    3072:MdEUfKj8BYbDiC1ZTK7sxtLUIGd7fKCibLon+wjcIDoB5W/3v2XJR:MUSiZTK405fKCibLkpQIDorqOXj

Malware Config

Signatures

  • Berbew family
  • Malware Backdoor - Berbew 1 IoCs

    Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.402ea667ce8d2d7ed6ace6afe843d5f3.exe
    .exe windows:4 windows x86


    Headers

    Sections