General

  • Target

    d2b43c4bbb8debd00e2c68c971269f20_NEIKI

  • Size

    416KB

  • MD5

    d2b43c4bbb8debd00e2c68c971269f20

  • SHA1

    febeb3cb9e63ae5362f5ab2fa04cae7394e5623c

  • SHA256

    9afa7bbcd474ebce8816475f9c0e471fce9b5535116fb461ccab0a93634322d7

  • SHA512

    356c1506bdf7a25ae39617073d930bffcc626602d0d3bac81a567d4dd109663a83d05bebc127f307cccdb90d480202187c75535364fe4fc60818d697269b4ad2

  • SSDEEP

    12288:OF7On5YJ07kE0KoFtw2gu9RxrBIUbPLwH96/I0lOZ0vbqFB:kI5YJ07kE0KoFtw2gu9RxrBIUbPLwH9n

Malware Config

Signatures

  • Berbew family
  • Malware Dropper & Backdoor - Berbew 1 IoCs

    Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d2b43c4bbb8debd00e2c68c971269f20_NEIKI
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections