Overview

overview

10

Static

static

10

6d78ed3727...KI.exe

windows7-x64

10

6d78ed3727...KI.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    6d78ed372779ef1f0260b4b6af452c00_NEIKI

  • Size

    1.2MB

  • MD5

    6d78ed372779ef1f0260b4b6af452c00

  • SHA1

    7b2395bff3a7ca23ce4ef914efefc16fc225c82c

  • SHA256

    ca35c63c8c8e897743e07e4c3458753767cc5722207a912fa91317fc6cf6b5c3

  • SHA512

    bc3a6e236ca1e77ee4c1dc2ce5d746625f29ba6b65a474bff0f070e4680db4f7a275ca32f8eccc743a668ddc72ff9741558f09f2bd5a0c8d7f97448ec1e4fad8

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlia+zzDwkpm2qyOKOaErQC80H2:knw9oUUEEDlnoO+C80W

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 6d78ed372779ef1f0260b4b6af452c00_NEIKI
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections