Behavioral task
behavioral1
Sample
4a4cf692f6d5f4c397cc68e56ac49cc0_NeikiAnalytics.exe
Resource
win7-20240215-en
General
-
Target
4a4cf692f6d5f4c397cc68e56ac49cc0_NeikiAnalytics
-
Size
396KB
-
MD5
4a4cf692f6d5f4c397cc68e56ac49cc0
-
SHA1
4fcbb033d182b4b1d0c99c9ba3e8d5490e03f41c
-
SHA256
44a1f658f1f276e5452b1240bb40e8818e73407321e1133f2c1f932b6df44bfb
-
SHA512
f731f41bfc2e5a8c3ad738353b4075897c5a0067de6d93d3c129bd3132e55a181d5d673995478f26d27f78dfca3a0d022fcb8f02f1d38e1dc3cbe287e01a2753
-
SSDEEP
12288:iOKn9EvOdNOri7eBmdIk4kl0a04OL5a6MuJpE0Lny19c09IkjrVIqbh/Uh9:iV9EINOeKmxp0a04OL5a6MuJpE0Lny14
Malware Config
Signatures
-
Berbew family
-
Malware Dropper & Backdoor - Berbew 1 IoCs
Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.
resource yara_rule sample family_berbew -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4a4cf692f6d5f4c397cc68e56ac49cc0_NeikiAnalytics
Files
-
4a4cf692f6d5f4c397cc68e56ac49cc0_NeikiAnalytics.exe windows:6 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 144KB - Virtual size: 60KB
Size: 228KB - Virtual size: 4B
���� Size: - Virtual size:
IMAGE_SCN_CNT_INITIALIZED_DATA
Size: - Virtual size:
Size: 163KB - Virtual size:
IMAGE_SCN_CNT_INITIALIZED_DATA