General

  • Target

    NEAS.6c4879beb8e6319f641344d3a3a57680_JC.exe

  • Size

    117KB

  • MD5

    6c4879beb8e6319f641344d3a3a57680

  • SHA1

    bc34f52a29a5de13678705c8a5e3f19df05fe998

  • SHA256

    172b9d029be730d6aca053fc3c4942065687c0a193e9228c6652a6281d956868

  • SHA512

    35eef569ea5562c7ef1afecaa4765c84f5234de9f675b0e524c02f83dfc8f2bddc2fff1871c7ddc1d97f9f0902dd3ac9d97e1f2e43b3d3287ea27f69aaeaeaae

  • SSDEEP

    3072:mhOmTsF93UYfwC6GIout1IOnX3oDSSLwRYcvrqrE66krY:mcm4FmowdHoS1IOnHoDTmhraHU

Malware Config

Signatures

  • Berbew family
  • Malware Backdoor - Berbew 1 IoCs

    Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.6c4879beb8e6319f641344d3a3a57680_JC.exe
    .exe windows:4 windows x86


    Headers

    Sections