Overview

overview

10

Static

static

10

6bf0e42a73...KI.exe

windows7-x64

10

6bf0e42a73...KI.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    6bf0e42a7308dd84427d32c6ccadbbc0_NEIKI

  • Size

    1.5MB

  • MD5

    6bf0e42a7308dd84427d32c6ccadbbc0

  • SHA1

    c94bacc7158e2d84c253069df095f2aa7398a3d0

  • SHA256

    b89becc60070a6441f49200fb208a2f3a6e10f0f43564d090d16db6003493519

  • SHA512

    a176b153cc09a583369e1786bd190cb4220986e06612d206ce87bf4715f91e3baa0f454d03af181028c555f21af7edf27c2bd76646b4a93f5cbb9824d913e17e

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlGC78XIO6zRIhRmuSOj1I3GouHxtZx:knw9oUUEEDlGUh+hNjLHf

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 6bf0e42a7308dd84427d32c6ccadbbc0_NEIKI
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections