General

  • Target

    e0f357bf1449377fa7d4dc2faf5d5a20_NEIKI

  • Size

    191KB

  • MD5

    e0f357bf1449377fa7d4dc2faf5d5a20

  • SHA1

    c38f006a2bb50b414889e498e61a6b557308c56a

  • SHA256

    7d6cb1e9e59825d26dc7a06eda2fc32758d475e4547a3c16698d8849e6cfe66f

  • SHA512

    bae4002c9a24b0a7e3014fdd488b1dbb11f5194513339cddd56d763ab98f2e33b9921a19d3ae6fe646008f1987a81adabb9874a6c7b580723f2e257f6c68e64c

  • SSDEEP

    3072:FhOmTsF93UYfwC6GIoutrVCfMoh52waAyiJ8mqtbfUVKty16hDsI/tSn:Fcm4FmowdHoS8fMoSVAHubPtyYxfA

Malware Config

Signatures

  • Berbew family
  • Malware Dropper & Backdoor - Berbew 1 IoCs

    Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • e0f357bf1449377fa7d4dc2faf5d5a20_NEIKI
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections