General

  • Target

    49cf6fcb24ef43e71cbb14e74ab2bd40_NEAS

  • Size

    243KB

  • MD5

    49cf6fcb24ef43e71cbb14e74ab2bd40

  • SHA1

    fdd880f5116d44d7862e2abd199b0f717de2ca09

  • SHA256

    7ccb6a8b66f8ca7e76c60370547685e9e8df158183298097353e23c35e54877f

  • SHA512

    b038697635b7f181d7f5710ae6a2098907459a4565f611c981c31de9350e6a386e9e2fc55047272b5faa9011bfbb4222183f2d8fc2a62a8e8af92d967183238f

  • SSDEEP

    6144:Bcm4FmowdHoSYrsyhraHcpOFltH4tVj6RZgE:L4wFHoSYg2eFp2j6z3

Malware Config

Signatures

  • Berbew family
  • Malware Dropper & Backdoor - Berbew 1 IoCs

    Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 49cf6fcb24ef43e71cbb14e74ab2bd40_NEAS
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections