General

  • Target

    672c8656a9dcb9d5d0c44f8246999e80_NEIKI

  • Size

    548KB

  • MD5

    672c8656a9dcb9d5d0c44f8246999e80

  • SHA1

    ae524c61e0d62f221aa8502d66a2e75d106bdde8

  • SHA256

    6c2232658895a88ef1081f43e8bd7ca7cbea5866a6e17f1d12a0c0f709d65031

  • SHA512

    5d689c5584d2b7a5890f044a280122e9752e061f2b40342adcd56688bfa542cfa68a610aee50ff02e711f517687e0f5d4e75e53fbd16c9b9079759b1da34babd

  • SSDEEP

    12288:RUmugavG6IveDVqvQ6IvBaSHaMaZRBEYyqmaf2qwiHPKgRC4gvGZ+C8lM1:RUlgbq5htaSHFaZRBEYyqmaf2qwiHPKu

Malware Config

Signatures

  • Berbew family
  • Malware Dropper & Backdoor - Berbew 1 IoCs

    Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 672c8656a9dcb9d5d0c44f8246999e80_NEIKI
    .exe windows:1 windows x86 arch:x86

    3235d0a66c0a8ca4d8b84f3bea439dce


    Headers

    Imports

    Sections