Overview

overview

10

Static

static

10

89c8f13be3...KI.exe

windows7-x64

10

89c8f13be3...KI.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    89c8f13be3928c2132cbcafebd9e4210_NEIKI

  • Size

    1.5MB

  • MD5

    89c8f13be3928c2132cbcafebd9e4210

  • SHA1

    a9983fdf333d7f33d0d56b554da014871f44ec3e

  • SHA256

    f979e3d8aca115dd081f49ab1a04f3d86b5f1fa6c24df3a878a82c6710acd86b

  • SHA512

    7bddafbeb06458e46704b5088f2675917206cb9ca57c8a2225720635d03026ff79c92923816b9231d4810f5d70bbf033fc7867514202123d1a49545f18f58053

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlGC78XCejIODosTigQytWpq0IIacMfwcgOWE7+4e2:knw9oUUEEDlGUrMNcbQc22m

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 89c8f13be3928c2132cbcafebd9e4210_NEIKI
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections