General

  • Target

    7b418fb6c13c93abe148282fdef3a8d0_NEIKI

  • Size

    316KB

  • MD5

    7b418fb6c13c93abe148282fdef3a8d0

  • SHA1

    4bb12c05d1a495dd3658c0b2df20bd146721ddf8

  • SHA256

    567384477ca7a2cb3501517d2c5838867026f9dfe2f1cb819acc3a81b20f98f6

  • SHA512

    822ecc6deb1d8b551d2d722a8091609761cc59d428c09327a6a38887ef28dffc66545f8b8cc6849ab888dc368a0e32e667e47adc8028ab31dbad76eda6797909

  • SSDEEP

    6144:0USiZTK40qIs9GQnp+ljF+JSV2EHh3RSj0LUxEA/+gQzQfFnUD+ehocGIRbhosPf:0UvRK4T9jp+1NV2EHh3RSILcE+9QzQp2

Malware Config

Signatures

  • Berbew family
  • Malware Dropper & Backdoor - Berbew 1 IoCs

    Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 7b418fb6c13c93abe148282fdef3a8d0_NEIKI
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections