General

  • Target

    NEAS.e3b1452e58ac9ca78bebd5d4f5225af0.exe

  • Size

    4.2MB

  • MD5

    e3b1452e58ac9ca78bebd5d4f5225af0

  • SHA1

    75963c55eccc2f43f0b30b5d9af9fb4c0e105b55

  • SHA256

    e71dd5d8a1dcd3ae95754d021508e391a894cc7e542eeba386ed69bcfc190908

  • SHA512

    04976ded030ce4880ea7b5f8700cca52d0a88930520b26d3122c1743d9151e74893401f913d9b6b0ccdda848445ff44fbb5f444839cf04d67936dd4d36ac1a96

  • SSDEEP

    98304:w11fVc0jW0CPt03jc3TdJWpl5ndtDLP/kgjaQyWHdkVUUVwn0jHBrf0qfXHhsN5S:ICF0zc3T+btDLP/kgjaQyWHdkVUUVwno

Malware Config

Signatures

  • Berbew family
  • Malware Backdoor - Berbew 1 IoCs

    Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.e3b1452e58ac9ca78bebd5d4f5225af0.exe
    .exe windows:4 windows x86


    Headers

    Sections