Overview

overview

10

Static

static

10

ef389c3481...KI.exe

windows7-x64

10

ef389c3481...KI.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    ef389c34811295724639d22552d80e90_NEIKI

  • Size

    362KB

  • MD5

    ef389c34811295724639d22552d80e90

  • SHA1

    962fbe751e0403b37f1ebd3aeb9fbdd89aac80bb

  • SHA256

    d55e2314a43d29681b74874329f3dad0c9479a6690d511c402e0a12e1f98ad80

  • SHA512

    6d69671e0b0ba8ccd15c007a616784b31abf59dcd23a9de0b92daa79ae4c02c359181a309e7316319427bf359c7d37a7f6b18da30690d1c709d058a02cce1759

  • SSDEEP

    6144:tpKgj7bltGDuMEUrQVad7nG3mbDp2o+SsmiMyhtHEyr5psPc1aj8DOvlvuZxriE5:6gjltmuMtrQ07nGWxWSsmiMyh95r5OPS

Score
10/10
backdoortrojandropperberbew

Malware Config

Signatures

  • Berbew family
    berbew
  • Malware Dropper & Backdoor - Berbew 1 IoCs

    Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    backdoortrojandropper
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ef389c34811295724639d22552d80e90_NEIKI
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections