General

  • Target

    fb12ea613ccb78beb87820f089365890_NEIKI

  • Size

    374KB

  • MD5

    fb12ea613ccb78beb87820f089365890

  • SHA1

    b4d1a143533c3fe73302cbdc094b2c9526332c7b

  • SHA256

    b05177ccbba73dbd9c4fb5e013e2e95d6d33d043523179a7161101802d13cc7b

  • SHA512

    318a28d2a05485a8c59f93241f7b2d632a427517f5e4ce7ad38c860388dfef60cd4068cf811c69cbe2fb1a19b8934a1ba7f3f1438ce270df95bf8fc628a4e2ae

  • SSDEEP

    6144:VRAdqcpp4e+Eu6QnFw5+0pU8oStTf3runG/qoxfIkeI1SHkF63lngMBdkw8ZF+Y:YYShE6uidyzwr6AxfLeI1Su63lgMBdID

Malware Config

Signatures

  • Berbew family
  • Malware Dropper & Backdoor - Berbew 1 IoCs

    Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • fb12ea613ccb78beb87820f089365890_NEIKI
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections