Overview

overview

10

Static

static

10

81af92de17...KI.exe

windows7-x64

10

81af92de17...KI.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    81af92de1721b75f5a7664694a5200f0_NEIKI

  • Size

    1.6MB

  • MD5

    81af92de1721b75f5a7664694a5200f0

  • SHA1

    0e2950d854bccddfa13bad4704df833e8fde0fa2

  • SHA256

    e4dc3fa4b016ccc5838a461fe5e2d59e5ad0deb0f077109b93672a481e783bfd

  • SHA512

    e05e3ee65cfc80cc689c0c740659ab588cdb1eff7e41b419bb0e76cfe783dd25ad8a205e0507192f709ee0accfc01f34f85393ccb6e046b69e0e590df7eb6c4c

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlWXWZ5Pbcq92zjP+sjI153gII/3OSJfAIDmYGB4wWU:knw9oUUEEDl37jcq4nPeyNIIKYWW6H

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 81af92de1721b75f5a7664694a5200f0_NEIKI
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections