Overview

overview

10

Static

static

10

5fa6db30ef...KI.exe

windows7-x64

10

5fa6db30ef...KI.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    5fa6db30efa67ed89c18134fd8eefc20_NEIKI

  • Size

    1.3MB

  • MD5

    5fa6db30efa67ed89c18134fd8eefc20

  • SHA1

    2744d8c7232e1ed4faddc259a4457ad253a94604

  • SHA256

    ba7ecaaa5946ab00ae8c42a786f9b8ff6632f50b037765d6e3be3797f70bc845

  • SHA512

    7d0bedbef0edb01d5694571a05cfa29cb406212c18cf81911255c951a4a9344021089c65a250d3d1fed1c18cc7dccd49a8332e495dbe549b0e65e89fa43f78e8

  • SSDEEP

    24576:RVIl/WDGCi7/qkatXBF6727vrNaT/6CFdDQC7FY5ANGrT7jf1rQynjim:ROdWCCi7/rahW/zFdDEANW7rhT

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 5fa6db30efa67ed89c18134fd8eefc20_NEIKI
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections