General

  • Target

    97b50e6605d927303eb12709dd9927d0_NEIKI

  • Size

    282KB

  • MD5

    97b50e6605d927303eb12709dd9927d0

  • SHA1

    455eb7aef42df622271f146eadca8549072f258d

  • SHA256

    5209d8dc0a48a159a5bd93ef3f71a6483aca38d964cf460ea217812230fd2914

  • SHA512

    793c059b730f270d2203a873e515944365ad44bc10f0e241722742ea22368f0d717d51b9ab12fdd58cd625c3e1fc0ceb37130d03d3f2dd8243522f0ee101fe0b

  • SSDEEP

    6144:SmVnxWa3L3PjqEPZlWDSmeM3YC/2AnvGsB4Cy6NNFJW9KYuLOush+X5RhgC:nf3L3PBes1CuAnvBmz6nXW9KYuLrsh+J

Malware Config

Signatures

  • Berbew family
  • Malware Dropper & Backdoor - Berbew 1 IoCs

    Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 97b50e6605d927303eb12709dd9927d0_NEIKI
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections