General

  • Target

    NEAS.fcf42657d3903638398a8238f0e60da0.exe

  • Size

    229KB

  • MD5

    fcf42657d3903638398a8238f0e60da0

  • SHA1

    0c67c3ac8a9a5d874a19ed67aee966a276014436

  • SHA256

    a93ddbc8e7f3b503b4b8737940f2efda09f95ece29d80ea65aee9591a70a5b0e

  • SHA512

    1e431e547e7ba084bafcf8cd06327adb5cb9cc47ccc4c7ec54fc5bb4d06a4dd849e0af77fd11efd977dd6b63fdd56bc0abbbb76219bf1604750dd4021359d8a7

  • SSDEEP

    3072:ydEUfKj8BYbDiC1ZTK7sxtLUIGT9kXH0hga4PjBy2XiXV/mwTwyg4K+mpPNHdUpH:yUSiZTK40V2a4PdyoeV/Hwz4zmpPNipH

Malware Config

Signatures

  • Berbew family
  • Malware Backdoor - Berbew 1 IoCs

    Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.fcf42657d3903638398a8238f0e60da0.exe
    .exe windows:4 windows x86


    Headers

    Sections