Overview

overview

10

Static

static

10

13f039f049...KI.exe

windows7-x64

10

13f039f049...KI.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    13f039f049a80dd05b153737a4a8b990_NEIKI

  • Size

    1.6MB

  • MD5

    13f039f049a80dd05b153737a4a8b990

  • SHA1

    45860d5241331903f4b9cedec3878174e02455ab

  • SHA256

    964115def56fa0ae618332b0640904d307c1e553ed5ff19c25b0a3b5a5b44dc5

  • SHA512

    ee6481c39bbd7045292793a16ed89cea3c6b3cda19840e63560c33c50d3471659c6a61ef326bd34935923f2bf2365a40710bab5e424ab3fff0e171113b697c4c

  • SSDEEP

    24576:RVIl/WDGCi7/qkatXBF6727F15qbrund+fT+xLTlHLnEPr33Il+8F37XeB9b0dc1:ROdWCCi7/rahlqOdg6VLEL3e7w

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 13f039f049a80dd05b153737a4a8b990_NEIKI
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections