Behavioral task
behavioral1
Sample
3411ec65e5ec65db97ac94a123890730_NeikiAnalytics.exe
Resource
win7-20240508-en
General
-
Target
3411ec65e5ec65db97ac94a123890730_NeikiAnalytics.exe
-
Size
224KB
-
MD5
3411ec65e5ec65db97ac94a123890730
-
SHA1
c9063a9bed6cdf0fb57ec2955d1b280c24d875e8
-
SHA256
ee45994f0a4ba3bf176142f0810d478f858a96224d979c82b1cf75a865cbc5e6
-
SHA512
ae38bf1ac877eccf08d3ca9d8a3f40a8a26d9b64ccdc959d397e3689030db839c4154c321ab1162e8352feb9eb3cf40ba8a3637fd53a782d295d859d50167eed
-
SSDEEP
6144:KUSiZTK40lUHTisQt9Nd1Kid908edttRURLwL:KUvRK4ZusQHNd1KidKjttRYLwL
Malware Config
Signatures
-
Berbew family
-
Malware Dropper & Backdoor - Berbew 1 IoCs
Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.
resource yara_rule sample family_berbew -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3411ec65e5ec65db97ac94a123890730_NeikiAnalytics.exe
Files
-
3411ec65e5ec65db97ac94a123890730_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 496KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 75KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE