Overview

overview

10

Static

static

10

442693f505...KI.exe

windows7-x64

10

442693f505...KI.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    442693f5058080944418cf9d6ebadf80_NEIKI

  • Size

    1.4MB

  • MD5

    442693f5058080944418cf9d6ebadf80

  • SHA1

    5bfe3e7c5e9886b47af8d4f81121ada1a4fb8e11

  • SHA256

    27af7c03caa080f009b8f516d77493cb8cc6a18b2402b5200910b81783875bfd

  • SHA512

    c87ed973b9d41264cf10c76791b1276e64e26b10e9645fa847348e910f0ebb318ecc36d0388336c5b8fc2d48ccabd38b691b118e6e67e499da544833bf13aa2b

  • SSDEEP

    24576:RVIl/WDGCi7/qkatXBF6727HeoPO+XC7A9GaFDnFelw+HT8V1NCgrW8cybQdASmK:ROdWCCi7/rahOYFB9bbANOkn

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 442693f5058080944418cf9d6ebadf80_NEIKI
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections