General

  • Target

    1fa5e672a12761ebad08b565270943b0_NEIKI

  • Size

    187KB

  • MD5

    1fa5e672a12761ebad08b565270943b0

  • SHA1

    b574c5838a9dcfe5754e63fb295b23bc1a5a2b7c

  • SHA256

    4655bc84fcf5798366c3b31aa0b212605a3b8aeef7de83e7462fd5181e2b9751

  • SHA512

    6ecf13351e678c9924420f80c3a3b346c12e13bd74059f8bfd150825e7f81ec888b2b8d5245b48a4acae9645772dac001ca625e0e67bf8735ad97fed4631eec5

  • SSDEEP

    3072:Rlj7fc6tVv/GzBba5Ze6Zl2NkzwH5GJks8WYlOWe7VsayDZVZev1N:RlXV/aBWKE9zwZ9s8SZq/svL

Malware Config

Signatures

  • Berbew family
  • Malware Dropper & Backdoor - Berbew 1 IoCs

    Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1fa5e672a12761ebad08b565270943b0_NEIKI
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections