berbew | fc0abb8d5f0ca4a79e5fdf3e244ae2f0_NeikiAnalytics[.]exe

General

Target

fc0abb8d5f0ca4a79e5fdf3e244ae2f0_NeikiAnalytics.exe
Size

338KB
MD5

fc0abb8d5f0ca4a79e5fdf3e244ae2f0
SHA1

84d3cbe440fba5d67f7cf6c074126130fa6bf9a4
SHA256

446a4c3e66060482bed2f056c181a68733451b8f6e5be908054d33f7e62ccf20
SHA512

01b6cadfe4e55a1fd9dc24e98a6cdd5305df46f6a70dbdd8b72dfa6dae77759185f1b78b1b8fa9f214e2605efd69816f13e91853e6e9a0614fe712cf71d2c56b
SSDEEP

6144:Kcm4FmowdHoSKAszBd+aQz0192lTk1ycUkpCnAUo0Leu2tZGnOiQ3jiDQIZbdVnR:U4wFHoSK1zBjA892lY196AUo0LX2tZqD

Score

10^/10

Berbew family
berbew
Malware Dropper & Backdoor - Berbew 1 IoCs
Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.
backdoor trojan dropper

Processes:

resource yara_rule

sample family_berbew
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
upx

Processes:

resource yara_rule

sample upx

resource	yara_rule
sample	family_berbew

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
fc0abb8d5f0ca4a79e5fdf3e244ae2f0_NeikiAnalytics.exe