Overview

overview

10

Static

static

10

5c5e30b7b9...KI.exe

windows7-x64

10

5c5e30b7b9...KI.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5c5e30b7b977f235658bff82e5eac970_NEIKI

  • Size

    1.3MB

  • MD5

    5c5e30b7b977f235658bff82e5eac970

  • SHA1

    496058e41058ff0fc82596a9203cb9f11f60949d

  • SHA256

    68c2b6c81333b4c69d4b2ccad211996ed320c390458944beb23af059a5a2eeef

  • SHA512

    c04e9990dc177120c45c7d5b59b46d92ea4b73b5c73f2f5a30eca0407ed1bf5d6794307ace5f31199455f4beaec72bb3342adecb7a29c6a47fd40b42dfb29105

  • SSDEEP

    24576:RVIl/WDGCi7/qkatXBF672E55I6PFw12TJ1tmyNJeo55w2NjgggJSjykoN8C:ROdWCCi7/rahF3OioF5Lm3Nv

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 5c5e30b7b977f235658bff82e5eac970_NEIKI
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections