General

  • Target

    7b5add55dce1f70de48296f7255da8f0_NEIKI

  • Size

    172KB

  • MD5

    7b5add55dce1f70de48296f7255da8f0

  • SHA1

    ef216a6024e213c052c5aa4cc3d3f24529af7fa5

  • SHA256

    a1de747f0e65b7e6b189ecdc24ae00e78029f5259093d3d59d4e8a96098344f0

  • SHA512

    630079cd70ccfa7cfecfea7b544a53621854c01e5c423d5a5aa975fc9c427080cfefde1b652966602d9d98b07d5978211ed001e91b080556c8bb90bb4ad1697b

  • SSDEEP

    3072:ehOmTsF93UYfwC6GIout1sWRkVap3daVszyKd+XqQz0esujClt+zZ4dMovmW1q7F:ecm4FmowdHoSKWqoFdAszBd+aQz0IClw

Malware Config

Signatures

  • Berbew family
  • Malware Dropper & Backdoor - Berbew 1 IoCs

    Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 7b5add55dce1f70de48296f7255da8f0_NEIKI
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections