Behavioral task
behavioral1
Sample
NEAS.58b3e20b135d7d2c1f1a1c09c04c0770.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
NEAS.58b3e20b135d7d2c1f1a1c09c04c0770.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.58b3e20b135d7d2c1f1a1c09c04c0770.exe
-
Size
1.0MB
-
MD5
58b3e20b135d7d2c1f1a1c09c04c0770
-
SHA1
eda42fd542e7e0eabe71d8aee988079f3d1d1968
-
SHA256
326c7953cf66036ac1807e417a8ad3dc86efccd6e99b5e3e77b9236ba0a6c5fe
-
SHA512
d81e0bfdbd609a41be9b550421daf4d93ba7f9b40667715bbe822f967ca64cfa44bd3fe2e6d8980765d7d7ed69a4a8472c2f37357d8e0873c48d0c0f82c9bc21
-
SSDEEP
24576:zEn5ZGTSPFDyUMxUKhN07vx9GQoadai7D3uITjIFOxo53ApIjIytlp:g5ZGTSFDyUMxUKhNCvx9GQ7ai7D3xTgD
Malware Config
Signatures
-
Berbew family
-
Malware Backdoor - Berbew 1 IoCs
Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.
resource yara_rule sample family_berbew -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.58b3e20b135d7d2c1f1a1c09c04c0770.exe
Files
-
NEAS.58b3e20b135d7d2c1f1a1c09c04c0770.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE