Overview

overview

10

Static

static

10

6a42e0fc5a...KI.exe

windows7-x64

10

6a42e0fc5a...KI.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    6a42e0fc5a8ee284e2552d7c2ae34340_NEIKI

  • Size

    1.6MB

  • MD5

    6a42e0fc5a8ee284e2552d7c2ae34340

  • SHA1

    fbe412e52749b95f98bca7284ace7cec9a16c10f

  • SHA256

    5b8ad15c3f32a77f0f67344512018fa1d915a643900fc8fc0f5bd86924408a6b

  • SHA512

    fba9067854ebed98545fb2f93620c262b85b435cc757615196d4e5c3ba130f2ffa66630adfe5a3c79ed0f692187c39b127a3edc6340de8fc51607769937b23cf

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkUCCWvLEvjhnXwx8/2Pbx/mbfCKSguKU7KgHy:Lz071uv4BPMkHC0IlnASEx/mCrT2Yy

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 6a42e0fc5a8ee284e2552d7c2ae34340_NEIKI
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections