Overview

overview

10

Static

static

10

5e20488c9c...KI.exe

windows7-x64

10

5e20488c9c...KI.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5e20488c9c06f9b846e0e5f87754b2a0_NEIKI

  • Size

    767KB

  • MD5

    5e20488c9c06f9b846e0e5f87754b2a0

  • SHA1

    7c66b79e162dd9655e40742ede104c83abdc4db9

  • SHA256

    ce895afdbb14589f396746946a3ada8acb74fc47fd54abb9bb2a59c62b393ef0

  • SHA512

    3a143a11b6c77a2425eb153098aef3ef52c803dfaae4ab9b38b42a5c5f59141880693a1be3440433307e4312afcdf32de554237c5c109d03503a22725f04c2dc

  • SSDEEP

    12288:J5LnfEnwhTb2GlaekkIWQm/w2ONMXpGXXUAjeX/95ETPl3R4XDT59ZE2mFvKBQEY:JanwhSe11QSONCpGJCjETPlOZ9Zjm5iy

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 5e20488c9c06f9b846e0e5f87754b2a0_NEIKI
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections