General

  • Target

    de2762111c9a3530c5604d4ccd9c54c0_NEIKI

  • Size

    526KB

  • MD5

    de2762111c9a3530c5604d4ccd9c54c0

  • SHA1

    1738cd04775e4f5612f1a47024ef32bfbcf58fe5

  • SHA256

    dc7e0ec086e2941a347937f97edc31dd871aa242a1593b30cb03cfa8668cce1d

  • SHA512

    5f449593fbcdd68b704f37e9a53a50e6ee45df9f0197da5d63c44ef17ebb8d2188f0baae34caf34d9f9fc210a038a3a8c1ae4a17fdf761f2dc1f7a374cbe1d84

  • SSDEEP

    12288:14wFHoSieFp3IDvSbh5nP+HuH3OWA2iHbGSLCL66KS4GZh9Qhwc9cfSX2MHw7zck:nFp3lzp3OWA2iHbGSLCL66p4GZh9QhwN

Malware Config

Signatures

  • Berbew family
  • Malware Dropper & Backdoor - Berbew 1 IoCs

    Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • de2762111c9a3530c5604d4ccd9c54c0_NEIKI
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections