Overview

overview

10

Static

static

10

873908cead...KI.exe

windows7-x64

10

873908cead...KI.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    873908ceadde25355f16015c1efab620_NEIKI

  • Size

    1.3MB

  • MD5

    873908ceadde25355f16015c1efab620

  • SHA1

    875d47d6981e31e325c6ae57a9b89401bdd75465

  • SHA256

    a1691be7c0e84f13f15f26f85ac483989cff6ce1b8f11ad9651dd1d442be5d5d

  • SHA512

    5e6379bef61bafeb91a4cee69e393bbb92ddab42795fe263a1aab047ce002eedfb641e0cfb67571da93ab41e6ef3f481ca4fe03cd2dfff19e0897674a9f1f39e

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlWXWZ5PbcmC3f/DFNkTF8t2o4l4ox+G:knw9oUUEEDl37jcmWH/Ir

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 873908ceadde25355f16015c1efab620_NEIKI
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections