General

  • Target

    d324acd2d5d526e9d0c210b9ed9b06e0_NEIKI

  • Size

    448KB

  • MD5

    d324acd2d5d526e9d0c210b9ed9b06e0

  • SHA1

    2b6030daa451bd9b5ac8272bd33d1fe4b083803a

  • SHA256

    9125a1b3a8700057e7422e0119343b23292d3cbd3ac2b5b872215cc5f51bc57d

  • SHA512

    009bcf65d97fd713023afa6c6c12d68647dff647d1cba4def29339ccd2bd19f16870fb29bd92692d3dbafe3378aa1ae528b6013e39f2a287c8efa5528a35298a

  • SSDEEP

    6144:PNr6DkUJ7aOl3BzrUmKyIxLfYeOO9UmKyIxLiajOEjXP3HBsR4/0ePGSzxC:Fr6n7aOlxzr3cOK3TajRfXFMKNxC

Malware Config

Signatures

  • Berbew family
  • Malware Dropper & Backdoor - Berbew 1 IoCs

    Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d324acd2d5d526e9d0c210b9ed9b06e0_NEIKI
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections