Overview

overview

10

Static

static

10

38813a9805...KI.exe

windows7-x64

10

38813a9805...KI.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    38813a98055eaf4dcff5f416b36db2a0_NEIKI

  • Size

    1.8MB

  • MD5

    38813a98055eaf4dcff5f416b36db2a0

  • SHA1

    d1080e6b4443636c830218f9935beeda08237bed

  • SHA256

    e7a739e167a4f1a410269bdef4e708f311a3b2a845ae651847335635d7e68a06

  • SHA512

    4f3e786ce2781386d733bea22e7fb1443b4a4702fa6acd32ccff7c90f7c0e69d76860f445477ced715dd72df2acba702457e8f53240346b9c3c5285d71d8da5c

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlGC78XIO6zRIhRmuSOGApwJbxgU67tqSNP3l50wbp4:knw9oUUEEDlGUh+hNGTbu5bZi

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 38813a98055eaf4dcff5f416b36db2a0_NEIKI
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections