Overview

overview

10

Static

static

10

404cc83245...KI.exe

windows7-x64

10

404cc83245...KI.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    404cc83245326ae514379d7176835250_NEIKI

  • Size

    2.2MB

  • MD5

    404cc83245326ae514379d7176835250

  • SHA1

    ffdbec6fe044008d09cd4f77241229a4b44188e6

  • SHA256

    e8dcdb0676b37e96a7177bed817e20b51efbd55f6e933c52108dcb3bc1849780

  • SHA512

    f867be0d6e0df1481a0405f3dac980ac4e407a9198630a33b7f02237f5a4f883e4eea9d2c032bd73dfdfa6ffb291350079b67b8cb8b09b70b1e658e08a9d67dc

  • SSDEEP

    49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6StVEnmcKWnq0vljb:BemTLkNdfE0pZrwH

Score
10/10
minerupxkpotxmrig

Malware Config

Signatures

  • KPOT Core Executable 1 IoCs
  • Kpot family
    kpot
  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 404cc83245326ae514379d7176835250_NEIKI
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections