General

  • Target

    d850c481ac2c614ce504f246cb4d7370_NEIKI

  • Size

    276KB

  • MD5

    d850c481ac2c614ce504f246cb4d7370

  • SHA1

    3152b6540ef5a69cecd19a96210f7cef980e5fb2

  • SHA256

    392b8ac1c42bcfc8d69ddb448d1bbedc48fe4da16d347d489433f3db4dbe5433

  • SHA512

    6db94579be57290056c3f3cde12c4742eb044f11f0193f25658255895e79db5a0680f15007ea08123cc71673ac1423805779c2c8563b108967d3390c5e65e58e

  • SSDEEP

    6144:M29/mNORLSdn7MUZst5qXsunbLwMddjPXmF6EC1LlzxAKN+xTU5AX/KXWZCKl/j:M29/HR+pMUQunbpd/mF6ECJlzxAKN2Xh

Malware Config

Signatures

  • Berbew family
  • Malware Dropper & Backdoor - Berbew 1 IoCs

    Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d850c481ac2c614ce504f246cb4d7370_NEIKI
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections