General

  • Target

    NEAS.b1ab4556fac3d7b050ec8f64b7953130_JC.exe

  • Size

    268KB

  • MD5

    b1ab4556fac3d7b050ec8f64b7953130

  • SHA1

    daa74fc2f1362dcbfa760f53845f8430fedcfdc8

  • SHA256

    97964dab8606c4ea77410afc5e9344a2452b22873a72d3814936e2059e817f07

  • SHA512

    1ae223126adb5a20de7476a9583a26714f1accc1b92b8daec5fa1b05232983d9e836ef5faee6b5b072fcff60e1a2bffd3655f8a0431b1eeb99be5e53e9337065

  • SSDEEP

    6144:tmVn8UzbF68H3S8+b6uyptXIi9u/mp8saZHRD4v4M84Z9YkF/GeHNHyORQdcIKtR:Y68XS8+d8HamysaZHRD44M3ZzF/Gez2E

Malware Config

Signatures

  • Berbew family
  • Malware Backdoor - Berbew 1 IoCs

    Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.b1ab4556fac3d7b050ec8f64b7953130_JC.exe
    .exe windows:4 windows x86


    Headers

    Sections