Overview

overview

10

Static

static

10

6bd54f7ed5...KI.exe

windows7-x64

10

6bd54f7ed5...KI.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    6bd54f7ed5b1ab40704f56a53b14d2f0_NEIKI

  • Size

    1.5MB

  • MD5

    6bd54f7ed5b1ab40704f56a53b14d2f0

  • SHA1

    d57b7b4fa90ce6a4eee8dc91eb83dfb3b236640f

  • SHA256

    fe3e7683d43973c3da7acd4ef0c958c0a62f2c886be7b5d9dc474aa1265e32c8

  • SHA512

    a677b327c04c13a74150ae600ec521420e9bb887c01f8b4fd2e1383a078d3216042379cbf1940c06b31b31d93a5d168379e5ea4c64c4a1310f159af6b69c9084

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkyW1HU/ek5Q1szp5NnNvZWNChZ7fI+BJad5g1XYhT:Lz071uv4BPMkyW10/w16BvZXB4mI

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 6bd54f7ed5b1ab40704f56a53b14d2f0_NEIKI
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections