General

  • Target

    fd4518265acfd8aa032f59e72ec6bf90_NEIKI

  • Size

    225KB

  • MD5

    fd4518265acfd8aa032f59e72ec6bf90

  • SHA1

    021f0fb4e271d83efbd8179bb1c31c03d39b0c41

  • SHA256

    7728cae6c6db2f3879e32f0354d75dd83b46e15cbe25c66baf9a852189aeea03

  • SHA512

    1d3a270addcd4a70282fb4ebad2b96dd87c10942ae7d80f80ba4af926a068fa9b3e995ce222fd1674c0afdf1009344feac47754c0e08374f5fdb877296404a9e

  • SSDEEP

    6144:KUSiZTK40lUHTisQt9Nd1Kid908edttRURLwl:KUvRK4ZusQHNd1KidKjttRYLwl

Malware Config

Signatures

  • Berbew family
  • Malware Dropper & Backdoor - Berbew 1 IoCs

    Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • fd4518265acfd8aa032f59e72ec6bf90_NEIKI
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections