Behavioral task
behavioral1
Sample
890b5d7a754d718ddfb2a2ce5d5cb5e0_NeikiAnalytics.exe
Resource
win7-20231129-en
General
-
Target
890b5d7a754d718ddfb2a2ce5d5cb5e0_NeikiAnalytics.exe
-
Size
214KB
-
MD5
890b5d7a754d718ddfb2a2ce5d5cb5e0
-
SHA1
2b1d2826e11d8cf5b6eb116f1db5999c3c9317dc
-
SHA256
7e51cb8cb177d57d51c970df3e5ace64f0e8a0c40e9589db9234d15165e25b9a
-
SHA512
a64e5cc5b97887c67079607a54367dec3fdc3ed97495a18916712682fac03f2bac1fbf1fc39bc6703c628384f5d2aece0563537c31a04211b8224fc0b4294105
-
SSDEEP
3072:ZhOm2sI93UufdC67ciEu0P5axvqdUmdznCvs7BuRoYFBg/gXVqPfSoi0yG24ePz:Zcm7ImGddXEu0ucju6/4kf724S
Malware Config
Signatures
-
Berbew family
-
Malware Dropper & Backdoor - Berbew 1 IoCs
Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.
resource yara_rule sample family_berbew -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 890b5d7a754d718ddfb2a2ce5d5cb5e0_NeikiAnalytics.exe
Files
-
890b5d7a754d718ddfb2a2ce5d5cb5e0_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.rsrc Size: 40KB - Virtual size: 152KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 3KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ