General

  • Target

    505d19f459d15ccaa5e6ec7387288f60_NEIKI

  • Size

    348KB

  • MD5

    505d19f459d15ccaa5e6ec7387288f60

  • SHA1

    c07b3634e21d04580fad6eff133643108cf27357

  • SHA256

    cc82d1101d1810c77f9d66e01acd6fe21b8ff80ec983f9f00d40ae3e427c614c

  • SHA512

    a2cf959c6987e01fc03cde0cb0e8e0f6a0d5780f8cbc3af554bd80a2dd0c133db211de975c0ee241daebc319571c7c629c84101195e3a4c676be0c0cdd96236b

  • SSDEEP

    6144:bcm4FmowdHoSgWrXD486jCpoAhlq1mEjBqLyOSlhNFF2C:h4wFHoSgWj168w1VjsyvhNFF2C

Malware Config

Signatures

  • Berbew family
  • Malware Dropper & Backdoor - Berbew 1 IoCs

    Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 505d19f459d15ccaa5e6ec7387288f60_NEIKI
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections