General

  • Target

    NEAS.6464a6faf9e9dc917620711672e4d2a0.exe

  • Size

    481KB

  • MD5

    6464a6faf9e9dc917620711672e4d2a0

  • SHA1

    544444787c058dd742cf006eb75f1ce2a514b72e

  • SHA256

    b174b317b840312bf6c4d5b1fa8ffd6ba4e7091974c10921ab9d3e1884ce19d3

  • SHA512

    d8365667503b8ceb8c31f459340fdff63f726f63754d88790fe4ba60058db80513edd1241348ea8f361d796f8ce08418a633dee88dc6c955517117346331f198

  • SSDEEP

    12288:N4wFHoSMu49P9mPh2kkkkK4kXkkkkkkkkl888888888888888888nI:Cu49lmPh2kkkkK4kXkkkkkkkk6

Malware Config

Signatures

  • Berbew family
  • Malware Backdoor - Berbew 1 IoCs

    Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.6464a6faf9e9dc917620711672e4d2a0.exe
    .exe windows:4 windows x86


    Headers

    Sections