General

  • Target

    fa7907cbbba8c18b863d57a07326f7c0_NEIKI

  • Size

    166KB

  • MD5

    fa7907cbbba8c18b863d57a07326f7c0

  • SHA1

    a75835a2e254f9e075814cf33123c36c005b3d0f

  • SHA256

    ae4f17d9a3988ef817b92606e8b9aa178e13ed6b62a8932d930e4bb03f4f894b

  • SHA512

    00b8d44a66cf590d10dff87d59f26edf744386f2498e6b567bfb648d7eb949b4b9d4cc184d432f00e47129af697c7df0bc554b92640ea7784edf806970acd000

  • SSDEEP

    3072:ehOmTsF93UYfwC6GIout1sWRkVap3daVszyKd+XqQz0esujClt+zZ4dMovmW1q7A:ecm4FmowdHoSKWqoFdAszBd+aQz0IClp

Malware Config

Signatures

  • Berbew family
  • Malware Dropper & Backdoor - Berbew 1 IoCs

    Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • fa7907cbbba8c18b863d57a07326f7c0_NEIKI
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections