General

  • Target

    cf894aeb56f66fa0f249d002a4a231b0_NEIKI

  • Size

    378KB

  • MD5

    cf894aeb56f66fa0f249d002a4a231b0

  • SHA1

    fa8f5c02b45016e33211bec597b4d620a8746cd0

  • SHA256

    73349c92401e769ecb2befab202c821e1882b6b26abfdd1bbefbac200c944b9c

  • SHA512

    c40ee2db4c55acdad6f73328b0d6d403d77473d93c4b6b7dd1efefdcf61e7b9806875b8c34835544b966688fcbf6d03717382727fc4632c12fa74414c96e2148

  • SSDEEP

    6144:Tn6dNnEneYr75lHzpaF2e6UK+42GTQMJSZO5f7M0rx7/hP66qve6UK+42GTQMJSi:Tn6dWneYr75lTefkY660fIaDZkY660fR

Malware Config

Signatures

  • Berbew family
  • Malware Dropper & Backdoor - Berbew 1 IoCs

    Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • cf894aeb56f66fa0f249d002a4a231b0_NEIKI
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections