General

  • Target

    213c6e04296b5bc480c98d36372b6f20_NEIKI

  • Size

    109KB

  • MD5

    213c6e04296b5bc480c98d36372b6f20

  • SHA1

    8b63fa28cf630b0ec1aab60de5853044ccb1ab05

  • SHA256

    8f512f274ed45295f9c41d7200b16b82bd810a9a7daf8c1ba70fba181fe10c2a

  • SHA512

    bfaba1f0c5cd9ebcf06872a3b96ae2e648e7d9df1d53f16e1f9a93d5ad04db9db165f72ca0fc629018c306ef2e88a3f45ff25e86db57275446683a533c2cd544

  • SSDEEP

    3072:mb/cDChoNFwnVOiibUegDXDDLLLhbTJ9UkLCqwzBu1DjHLMVDqqkSpR:mb/cu6NaVOiigegDXDDLLLFJ9Nwtu1De

Malware Config

Signatures

  • Berbew family
  • Malware Dropper & Backdoor - Berbew 1 IoCs

    Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 213c6e04296b5bc480c98d36372b6f20_NEIKI
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections