Overview

overview

10

Static

static

10

11784349ad...KI.exe

windows7-x64

10

11784349ad...KI.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    11784349adecdf7a15953d418ae2dbf0_NEIKI

  • Size

    1.5MB

  • MD5

    11784349adecdf7a15953d418ae2dbf0

  • SHA1

    43b468120ce3e9b78c88e92b9d0f8c78e51ecd05

  • SHA256

    2869e0d4dd8b18849f4e42082e99fc9951f03dec15b622aed14d1d95ee9fe962

  • SHA512

    a92fb53367b1455f0001dcfc26683ba5019c642deccc12c9c43bfa80ca234e65fd3d5b157495250fed8da02f4f038e23faafeb1d5fba9cd6c5940e6eccd7ebc9

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlia+zzDwxOpyinKCB9WIoC3IT5xHvHsaXiJR/VdQNb:knw9oUUEEDlnCNfeT5J0aXiJwXr

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 11784349adecdf7a15953d418ae2dbf0_NEIKI
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections