Overview

overview

10

Static

static

10

ef48d9ea71...KI.exe

windows7-x64

10

ef48d9ea71...KI.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    ef48d9ea71df32dee6904d49bed7d260_NEIKI

  • Size

    1.3MB

  • MD5

    ef48d9ea71df32dee6904d49bed7d260

  • SHA1

    856aa774946ddee251fe8e466a40515bfc40b298

  • SHA256

    84d7197e1088ae0e36bd56b8f84e5f86823519298178787a7cd23ebc52c11534

  • SHA512

    b9fbaa0ee71e8f57b5cfff780eda8b8217e98e6b647284215e246bb4b90a80f121a3f281f3201b9e291bb4674ed00a84c739253775d57987b6a60a02cd13270e

  • SSDEEP

    24576:ESp1NSvr4B9f01ZmQvrb91v92W9C05wkEPSOdKkrzEoxrC9toC9Dq9onk8:30kB9f0VP91v92W805IPSOdKgzEoxrl0

Score
10/10
backdoortrojandropperberbew

Malware Config

Signatures

  • Berbew family
    berbew
  • Malware Dropper & Backdoor - Berbew 1 IoCs

    Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    backdoortrojandropper
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ef48d9ea71df32dee6904d49bed7d260_NEIKI
    .exe windows:1 windows x86 arch:x86

    26babd76bbb7f9c516a338b0601b4c9f


    Headers

    Imports

    Sections