General

  • Target

    54d00959794eb226f648020308c4c5f0_NEAS

  • Size

    252KB

  • MD5

    54d00959794eb226f648020308c4c5f0

  • SHA1

    f55e10719119878c4a5ed77cfe9bc06083600963

  • SHA256

    f59230f16cf3f57706d5ca386e9a9d837488d62bb9f0401ff0663bdca029dd2c

  • SHA512

    cddf5624a627ca7de6d74bf028fbd35c183c9c18f83915ed39d20c361e4139333d971fd7b9f35a24df794a3c7a743233b0da24114e234c2341ff0359cb9fed56

  • SSDEEP

    3072:chOmTsF93UYfwC6GIoutieyhC2lbgGi5yLpcgDE4JBuItR8pTsgZ9WT4iaz+THkv:ccm4FmowdHoSi9EIBftapTs4WZazeEv

Malware Config

Signatures

  • Berbew family
  • Malware Dropper & Backdoor - Berbew 1 IoCs

    Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 54d00959794eb226f648020308c4c5f0_NEAS
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections