Overview

overview

10

Static

static

10

b8396a53e0...KI.exe

windows7-x64

10

b8396a53e0...KI.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    b8396a53e0f4901c7c8e347268922890_NEIKI

  • Size

    1.5MB

  • MD5

    b8396a53e0f4901c7c8e347268922890

  • SHA1

    193aa55228c8c611ccfa2e07bafa9e59af7d16f4

  • SHA256

    8698d99b927810997266256a71fada42ca969e16246b9d0b00dfb6e72b32d159

  • SHA512

    2f91d793256153e22d7b4e94addbc3c0a16848ff222ca886c1017ca810879d20f4c1486854a4c7e4ce41535084455a4eafcbe32bed5ee96c7578ecba2c4c6496

  • SSDEEP

    24576:RVIl/WDGCi7/qkatXBF6727XL1+KICdyyPo++UIUFlBaNC2LKqHtl2BZquYVMQsI:ROdWCCi7/rahHxJTFlt2O+2BHI

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • b8396a53e0f4901c7c8e347268922890_NEIKI
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections