Overview

overview

10

Static

static

10

28b6f60f9a...KI.exe

windows7-x64

10

28b6f60f9a...KI.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    28b6f60f9a8d870326a728fa000e79a0_NEIKI

  • Size

    2.9MB

  • MD5

    28b6f60f9a8d870326a728fa000e79a0

  • SHA1

    4f845040908d03b294be30fa8c2855bed9f6052e

  • SHA256

    17c8b93a8188442fb3bdea66eea5c8eb9555a887c5460d5252d80d2e8145383a

  • SHA512

    b0378c69f5d95cf90810d1dd0ec6bb22709d219dccc869f3f0debed800154dc2350ec0732f7cff4e156202bc2f94d2848a92b252e2a1a2a0cd1cfdb6646c503c

  • SSDEEP

    49152:S1G1NtyBwTI3ySZbrkXV1etEKLlWUTOfeiRA2R76zHrWax9hMkFfdg6NsIRh4HEL:S1ONtyBeSFkXV1etEKLlWUTOfeiRA2Rs

Score
10/10
minerupxxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 28b6f60f9a8d870326a728fa000e79a0_NEIKI
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections