General

  • Target

    d328ddb291316f1072ffeebccaf09b80_NEIKI

  • Size

    378KB

  • MD5

    d328ddb291316f1072ffeebccaf09b80

  • SHA1

    0cd8992d4e0ab0b2ceb6e5ac5f127f9f38383e28

  • SHA256

    22c1f1b83434f91ea0826afc5cbfc83ee52a21860a2d0d779b8a262cb6a198d0

  • SHA512

    2c669acbabdb052f12944b7cb5ce794fc9bc6a88e55658ebfdfed6b8129f04134e239d8ab7268b9f41d2ec6da562429bbc28ab729e910a40069c3af8778b2ba7

  • SSDEEP

    6144:ThUjMprtMsQBma/atn9pG4l+0K76zHTgb8ecFeK8TJ4u392vVAMR4/5V0lLn+Cwq:THRMsEat9pG4l+0K7WHT91M52vVAMq5U

Malware Config

Signatures

  • Berbew family
  • Malware Dropper & Backdoor - Berbew 1 IoCs

    Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d328ddb291316f1072ffeebccaf09b80_NEIKI
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections