General

  • Target

    NEAS.0e3b64aa8c0afbc3094ecc3c486b1160.exe

  • Size

    218KB

  • MD5

    0e3b64aa8c0afbc3094ecc3c486b1160

  • SHA1

    9d158f458c4632e439569b3e94439c101fcc9a18

  • SHA256

    5e0eb5f605b12d16bacc43aa255656b0ffc1396f45912c6a51df29f6a1a25b52

  • SHA512

    8c9317e76c514e85cf195b57c84d4f37b676afd5d70cb0cfbd3a1fa5a78f82de839957b20aaeaacbaff1c83a5f22e17299ad67c6d16618f40f9ae38c1137c584

  • SSDEEP

    6144:Jcm4FmowdHoS3dGmS4Z1hraHcpOaKHpaztyzEY:T4wFHoS3dJS4ZzeFaKHpCcn

Malware Config

Signatures

  • Berbew family
  • Malware Backdoor - Berbew 1 IoCs

    Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.0e3b64aa8c0afbc3094ecc3c486b1160.exe
    .exe windows:4 windows x86


    Headers

    Sections