Behavioral task
behavioral1
Sample
b84ec787916e123f663eae0afe12c800_NeikiAnalytics.exe
Resource
win7-20240221-en
General
-
Target
b84ec787916e123f663eae0afe12c800_NeikiAnalytics
-
Size
470KB
-
MD5
b84ec787916e123f663eae0afe12c800
-
SHA1
4ec60e3bad65ff3e3fee66a6efb00261db82659b
-
SHA256
928fde4de0f361c8da6f8e179529e47d107d8ff8a375dcda78865b20cdadabd1
-
SHA512
60b46d453e975708c38cc9539f395e070c428004afdd4926b26cdb19b9283fc0947e14f36a8e95bbb4bd961f87fb36a7524161defa23592a7e327184720e0229
-
SSDEEP
12288:57Tc1WjdpKGATTk/6Aihgth7L/QOKs+Q/RIVBjdB/22LX1W:TZpTATrAihgth7L/QOKs+Q/RIVBjdB/0
Malware Config
Signatures
-
Berbew family
-
Malware Dropper & Backdoor - Berbew 1 IoCs
Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.
resource yara_rule sample family_berbew -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b84ec787916e123f663eae0afe12c800_NeikiAnalytics
Files
-
b84ec787916e123f663eae0afe12c800_NeikiAnalytics.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 156KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
petite Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ