General

  • Target

    844598d0bba0abfdf326aaefe1d224e0_NEAS

  • Size

    252KB

  • MD5

    844598d0bba0abfdf326aaefe1d224e0

  • SHA1

    3997b90b7676d39fcf03c34531339a943d3a3509

  • SHA256

    15b539738b135568f1cc0e5f03eea6fbe261b620426ead2b5c8732ceb38b6742

  • SHA512

    5fe0786326a6df898f67aea9afed8888ba7ce0c808c022fd2e5257798c0863fcce38d62b1d05a5a84d395ceebb4009351cd8bea33e9cb67ed38c0fe70e27fe5f

  • SSDEEP

    3072:chOmTsF93UYfwC6GIoutieyhC2lbgGi5yLpcgDE4JBuItR8pTsgZ9WT4iaz+THkO:ccm4FmowdHoSi9EIBftapTs4WZazeEO

Malware Config

Signatures

  • Berbew family
  • Malware Dropper & Backdoor - Berbew 1 IoCs

    Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 844598d0bba0abfdf326aaefe1d224e0_NEAS
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections