Overview

overview

10

Static

static

10

3157a627b1...KI.exe

windows7-x64

10

3157a627b1...KI.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    3157a627b180e89c695ae5cca7e7d6c0_NEIKI

  • Size

    1.5MB

  • MD5

    3157a627b180e89c695ae5cca7e7d6c0

  • SHA1

    deebe2a91192b4822e89b05e3a4bfd207c0e83e2

  • SHA256

    f09de2fb95dad3b643723e5e7e9f9d121bab3162e12e514831bb416580ee94c7

  • SHA512

    6e0e606e286250df2701f8aad4fe2c0052638365bd6e956910f1f93b4153b3528e70dbfa2c891b34bd12db07cba29e8c329caa4c729c30c77d9c2272de74640a

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkFfkeMGvGr1t4oAirbNIjTnHM2L:Lz071uv4BPMkFfdk2auTVL

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 3157a627b180e89c695ae5cca7e7d6c0_NEIKI
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections