General

  • Target

    NEAS.3cc0a214dbe5a11399d5860dee5b65d0.exe

  • Size

    61KB

  • MD5

    3cc0a214dbe5a11399d5860dee5b65d0

  • SHA1

    dec6d36914be3fd5e577e894c06a3c5901bcbb76

  • SHA256

    58601e146490a9d8822a70df3af0b7eef4029119ad1dbf72a12dfc99af01f9fb

  • SHA512

    01c1646855b221822f8bf1fd9c1e037aeec629dabb099e4fe65761212ba9675158593f6af725979dcd0efbf2a012c1109f03fd2b27ed4b6f6f1fc8b132c12308

  • SSDEEP

    1536:afz8+JjFMRGwf57VF9svr83uMDVUPsZqGq:iz8OjuGw7ZjUUc

Malware Config

Signatures

  • Berbew family
  • Malware Backdoor - Berbew 1 IoCs

    Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.3cc0a214dbe5a11399d5860dee5b65d0.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections