Behavioral task
behavioral1
Sample
b7ff119bed7aaf611f7a59eab8b43280_NeikiAnalytics.exe
Resource
win7-20240215-en
General
-
Target
b7ff119bed7aaf611f7a59eab8b43280_NeikiAnalytics
-
Size
384KB
-
MD5
b7ff119bed7aaf611f7a59eab8b43280
-
SHA1
c445509412d0b0cd0089316944285930f8fac248
-
SHA256
4a82a459a86ab1bcf1b5670e412324c9cfaed058e310b17274b8f13620868140
-
SHA512
d3edb729434d76ff09cba4f7f61d70fcb17f9c355000329b048e89c78b7b3134f93aed3bba6edee86350e651368c375b860672091e8363ffa6dad2673be6e05b
-
SSDEEP
6144:vOc0kgvAzZDMQsB3rE3f8/mkkEjiPISUOgW9X+hOGzC/NM:vqkgsZ80kNkmZzcukG2/
Malware Config
Signatures
-
Berbew family
-
Malware Dropper & Backdoor - Berbew 1 IoCs
Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.
resource yara_rule sample family_berbew -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b7ff119bed7aaf611f7a59eab8b43280_NeikiAnalytics
Files
-
b7ff119bed7aaf611f7a59eab8b43280_NeikiAnalytics.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 144KB - Virtual size: 140KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 32KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ