Overview

overview

10

Static

static

10

840bd2c649...KI.exe

windows7-x64

10

840bd2c649...KI.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    840bd2c649c118472a190ddd07137620_NEIKI

  • Size

    2.3MB

  • MD5

    840bd2c649c118472a190ddd07137620

  • SHA1

    78ab977e0f52cd775a0ff1c3de337349bf4c6956

  • SHA256

    5b6f4771d19ea157822cc5328b6a4a3ea831f2c5184c906a9d887088c1545962

  • SHA512

    6fa1bd3c45c348ea42ab561949d518c80c8da25737cbafe072ea4b233216aab9943b8b4d67e9b33d7e976594c7e8c6f01cf5c30186341b44e8d25f16d9ba7ebf

  • SSDEEP

    49152:BezaTF8FcNkNdfE0pZ9ozt4wICbbnlD52U7/dNpikStr7B:BemTLkNdfE0pZrF

Score
10/10
minerupxxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 840bd2c649c118472a190ddd07137620_NEIKI
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections