General

  • Target

    8b959bfa1eb5e86b9bf92a73254fbc50_NEAS

  • Size

    155KB

  • MD5

    8b959bfa1eb5e86b9bf92a73254fbc50

  • SHA1

    ae37f6a10db7283249cfcc368ed24bdb2d97ee33

  • SHA256

    db9ed4189905efbe4e3a22ee400b889274bc954c56229feb85c78b6eb6547712

  • SHA512

    b7f47c92f9ff552b52370f990882346a0ceccc717152274d2853c6175ce52e8475ba4895ad2703e840504e2df903a41810109693a61b642bd3632fc34f9ffc8b

  • SSDEEP

    1536:WeT7BVwxfvEFwjRzbi/aDdaQLSMBGO8i5adc6J2iRyo:WmVwRKCzbUac4BZ89dd2Myo

Malware Config

Signatures

  • Berbew family
  • Malware Dropper & Backdoor - Berbew 1 IoCs

    Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 8b959bfa1eb5e86b9bf92a73254fbc50_NEAS
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections