General

  • Target

    0447191f9e13ff4af61e07da9d6b1930_NEIKI

  • Size

    416KB

  • MD5

    0447191f9e13ff4af61e07da9d6b1930

  • SHA1

    849b8c4b1ddc600baaa44d93dc56c1ebc79a95bf

  • SHA256

    959edfb9e681144a733820cc2c1cdc5ad7110de2edae60e48cc91259569baa07

  • SHA512

    d66681d42ccd3b0ca7c092d8461f7bab0540ac7dd90ec232ae202d522cf50064a6b4ac8da450078d62183d8f844343b08c63638c79f4b61289d16ac98b228bde

  • SSDEEP

    12288:RnrUwYJ07kE0KoFtw2gu9RxrBIUbPLwH96/I0lOZ0vbqFB:RnrUwYJ07kE0KoFtw2gu9RxrBIUbPLwB

Malware Config

Signatures

  • Berbew family
  • Malware Dropper & Backdoor - Berbew 1 IoCs

    Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0447191f9e13ff4af61e07da9d6b1930_NEIKI
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections