Overview

overview

10

Static

static

10

59d0295882...KI.exe

windows7-x64

10

59d0295882...KI.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    59d0295882e50771675ec51f48a8ae20_NEIKI

  • Size

    1.5MB

  • MD5

    59d0295882e50771675ec51f48a8ae20

  • SHA1

    4db364ae90acb6615b68d9014bcdceabd06d75bd

  • SHA256

    2825637c4d75806cae91ddb4cfbbec58c00287f2b8b670730597d9e95ec35d59

  • SHA512

    27706e72975c9c14d1845fc9f4b58dc522c255b03c1a4fc725ad4201932510a761bb3ef8b0d26f1949ca07cecbd9ec6dc6c1f39d1bbd2734d9d55e747dafa8bd

  • SSDEEP

    24576:RVIl/WDGCi7/qkatXBF6727F15qbrund+fT+gsi51JrtGYcrj6gW3UV:ROdWCCi7/rahlqOdg/cyBkV

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 59d0295882e50771675ec51f48a8ae20_NEIKI
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections