General

  • Target

    NEAS.bab56de5a97159d7ebcca969cbcc6f00.exe

  • Size

    182KB

  • MD5

    bab56de5a97159d7ebcca969cbcc6f00

  • SHA1

    f877d85a1186df6e5be48cfe883c3dde8fe2fac1

  • SHA256

    086e00dc18cbb1e014404428b8d705313a4496e1f9b280c9f310cc64d8fb5075

  • SHA512

    fced05a0888169fc433ac13029128d5613757a7e1eb1eb1460aa48a4f3365e6f00470c1e4d9cb008748c011d8100bb205304a0618ec1c9a34365180cbf401a2d

  • SSDEEP

    1536:heT7BVwxfvEFwjRs1PDXFi0VvBYv3kZtAV7ZBbP1yVGqV6zSVSGzsNEx:hmVwRKCULFlav+m7ZB5e3V6z1GzCk

Malware Config

Signatures

  • Berbew family
  • Malware Backdoor - Berbew 1 IoCs

    Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.bab56de5a97159d7ebcca969cbcc6f00.exe
    .exe windows:4 windows x86


    Headers

    Sections