General

  • Target

    347c41209168d9eda7616d4a7ee67b80_NEAS

  • Size

    276KB

  • MD5

    347c41209168d9eda7616d4a7ee67b80

  • SHA1

    1106d1037586191dfcf262c6310416234b623eb0

  • SHA256

    12ec2f13fdba6c25449643775791681064ff810cfb783b39ec1a0f5b221c5aca

  • SHA512

    156ac13b4a0580f9f435cc69b6a0bdba7f375e42fb824ce45dbd6c06ce81675a7b3d36526fa39ca808ecea33a49f3b17915279db1515fdc0547c46eafb7fb59b

  • SSDEEP

    6144:ncm4FmowdHoS6rW3NNTvBu6wo2J4JAgNXkArR/rtXOLtu4J6KvvLp3OKtUuuuTEf:14wFHoSeM/Tpu6w14JAOkIRhOBu4Jhvs

Malware Config

Signatures

  • Berbew family
  • Malware Dropper & Backdoor - Berbew 1 IoCs

    Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 347c41209168d9eda7616d4a7ee67b80_NEAS
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections