General

  • Target

    1605148c0da6e4b8b9461925bc048de0_NEIKI

  • Size

    487KB

  • MD5

    1605148c0da6e4b8b9461925bc048de0

  • SHA1

    ad51d562e0748447ceb86f3eaaa3f51d04462410

  • SHA256

    1d9a5edef56b5c67ef86a2aa898d687a10bed9493de1b8ada91c631259e472de

  • SHA512

    be78476ecccd5b2b049cc0d263fc58d4365f75d2acaf8156d1678c7170cd778f74ff148a365269ed6a5ccaef376f4a99912d8d2dbe0b7aa3dc3b1fe81c1e7076

  • SSDEEP

    12288:b7zOhpV6yYPI3cpV6yYPZ0PVdvcY9+8hk5PDtJNBcL/v610yiqo4Z:foWHWZ0PVdvcY9+8hk5DtJNBcL/C10dM

Malware Config

Signatures

  • Berbew family
  • Malware Dropper & Backdoor - Berbew 1 IoCs

    Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1605148c0da6e4b8b9461925bc048de0_NEIKI
    .exe .ps1 windows:1 windows x86 arch:x86 polyglot


    Headers

    Sections