General

  • Target

    504a3ee777462075d589bf6edc471f60_NEIKI

  • Size

    401KB

  • MD5

    504a3ee777462075d589bf6edc471f60

  • SHA1

    b7aa65fd7d7d377eed6b1a03ae04d86b8e0d8163

  • SHA256

    f098064edeac0a6408198a91ecd09eab22647931cfaba03c0ef5ba02502a1ecd

  • SHA512

    79d0e0a4bf8893954eeb38e321b465fc2a89d60b80a8f0c9e3c37e1f2d6f2a45336e7edc01d131c369bd72c581e05f40e7ad456933eaa091ab1e315af469baa1

  • SSDEEP

    6144:Q+eRGPtyrlndpui6yYPaIGckfru5xyDpui6yYPaIGckSU05836PGyA7:Q+eEtyxndpV6yYP4rbpV6yYPg058KrY

Malware Config

Signatures

  • Berbew family
  • Malware Dropper & Backdoor - Berbew 1 IoCs

    Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 504a3ee777462075d589bf6edc471f60_NEIKI
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections