General

  • Target

    d2d36755137663ab8e14b6fd59e65c90_NEIKI

  • Size

    276KB

  • MD5

    d2d36755137663ab8e14b6fd59e65c90

  • SHA1

    37e4e0bce4322d8402a9e7251796eca094a8eeca

  • SHA256

    7f9823a9353d63206f52b723dceeb89daec8f2374804a3f3584dbad13929d9ff

  • SHA512

    d484a873f4c745fe8b97f8719c5d0fb02c051d2d6ed70adf2805a822aaef95a6c644befe4f464a96fd4056ddae71e0a77312d4ca68f7defc53a88ee1c70f08b2

  • SSDEEP

    6144:IhrdJGNRcORLSdn7MUZst5qXsunbLwMddjPXmF6EC1LlzxAKN+xTU5AX/KXWZCK9:mKR+pMUQunbpd/mF6ECJlzxAKN2X/WW7

Malware Config

Signatures

  • Berbew family
  • Malware Dropper & Backdoor - Berbew 1 IoCs

    Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d2d36755137663ab8e14b6fd59e65c90_NEIKI
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections