General

  • Target

    3e71cc989802e80d648a4fe79bca3d70_NeikiAnalytics

  • Size

    317KB

  • MD5

    3e71cc989802e80d648a4fe79bca3d70

  • SHA1

    d59767b785182a60698a89e9cc9685ebfb153ee7

  • SHA256

    b52146669e9b85ff74fa06d98264968ef15e86bf377b49653a002fb564a24d11

  • SHA512

    62b9fea0fd4e36b5878f43941f94c88b98a321610bc291c14b4413bd0f71228a4a75e8cda702a427c70c1efae40a0c40ee96b20ef14e046f705f52f952b8d81f

  • SSDEEP

    6144:0USiZTK40qIs9GQnp+ljF+JSV2EHh3RSj0LUxEA/+gQzQfFnUD+ehocGIRbhosPp:0UvRK4T9jp+1NV2EHh3RSILcE+9QzQpc

Malware Config

Signatures

  • Berbew family
  • Malware Dropper & Backdoor - Berbew 1 IoCs

    Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 3e71cc989802e80d648a4fe79bca3d70_NeikiAnalytics
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections