Behavioral task
behavioral1
Sample
9058b3b5e97de9567687686188df2d10_NeikiAnalytics.exe
Resource
win7-20240215-en
General
-
Target
9058b3b5e97de9567687686188df2d10_NeikiAnalytics.exe
-
Size
172KB
-
MD5
9058b3b5e97de9567687686188df2d10
-
SHA1
9087e000db55eb08234eb82fe2b145affc6b13fb
-
SHA256
a7b67c02c93b01f8430a4b0118548ab3c2c12ca07277a7fb63e1a00a2b5bd957
-
SHA512
c68c5bf9b6b50a51615d8a82ead0b50abbf0f2cae78bf03cade3f7079e7f2248f8e1488ad2f3bc00b8e1c6d318320c38cb7d4dfa1a5dbadcebd08b999485b78c
-
SSDEEP
3072:EmVwRKCzG7wIxY6UT+THFLKcRaTOuNfnn4h1UiGe7r0/yTr:EmVnkG7Rx1Ui7F9RuOO48iJH0qH
Malware Config
Signatures
-
Berbew family
-
Malware Dropper & Backdoor - Berbew 1 IoCs
Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.
resource yara_rule sample family_berbew -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9058b3b5e97de9567687686188df2d10_NeikiAnalytics.exe
Files
-
9058b3b5e97de9567687686188df2d10_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 41KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ