General

  • Target

    NEAS.44ce840afe3b35e25e40fa132a6e0e80.exe

  • Size

    311KB

  • MD5

    44ce840afe3b35e25e40fa132a6e0e80

  • SHA1

    dc0d2b3ff4adc0aa40105b1f816885724842b30f

  • SHA256

    0e685748e426bccdee44c001abc9cd3ac2d578cb4e7449e6c6dd7bed3c6df380

  • SHA512

    3d267fcf63d61db4594fd65b4f803be264544ff3de25c4f4a257edfe82a06f681618baad7ca757710e7a789639391ccb216a415c8d2b96c0dfff892c11ea9b18

  • SSDEEP

    6144:0USiZTK40qIs9GQnp+ljF+JSV2EHh3RSj0LUxEA/+gQzQfFnUD+ehocGIRbhosPp:0UvRK4T9jp+1NV2EHh3RSILcE+9QzQp6

Malware Config

Signatures

  • Berbew family
  • Malware Backdoor - Berbew 1 IoCs

    Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.44ce840afe3b35e25e40fa132a6e0e80.exe
    .exe windows:4 windows x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86


    Headers

    Sections