Overview

overview

10

Static

static

10

66813f555d...KI.exe

windows7-x64

10

66813f555d...KI.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    66813f555dd869a81e4e8a4ae2fbfe10_NEIKI

  • Size

    1.2MB

  • MD5

    66813f555dd869a81e4e8a4ae2fbfe10

  • SHA1

    2cb63636149bfdf33333fba2bf1c35e4a63b147d

  • SHA256

    79b1d8fa7b30833d4c3dbe7bca54004fb50a7ca6c321d8aaf7283d36ab63d541

  • SHA512

    9d4ed064d16b85ab0485e7bb949928242bc23941b3b6c254e2a86a7f425aeca8b7ecb1d693ee40172c7592dcc4ec5c112aecfba81adccc521fa8d771b0391e3f

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkUCCWvLEvjhnXwx8/2Pbx/mbGRE:Lz071uv4BPMkHC0IlnASEx/RS

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 66813f555dd869a81e4e8a4ae2fbfe10_NEIKI
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections