Overview

overview

10

Static

static

10

d80ea1b206...KI.exe

windows7-x64

10

d80ea1b206...KI.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    d80ea1b206acd6785dd8e54eaa5f74c0_NEIKI

  • Size

    3.0MB

  • MD5

    d80ea1b206acd6785dd8e54eaa5f74c0

  • SHA1

    15061469f7c56893c0335c8ee3d1cea9b53e1bc3

  • SHA256

    15683a8d69c0875e5caaa466cd17e942f36088ff5ae8a3c7a6220b777a223a36

  • SHA512

    95fbe71876de5502ec566f392800995dc657a1cb415c257a1db0a3ab7b8d3056f319018980e4d83295e705f0826e3ff6fe752c0a7b0e5933db11ed99539475f3

  • SSDEEP

    49152:S1G1NtyBwTI3ySZbrkXV1etEKLlWUTOfeiRA2R76zHrWax9hMkFfdg6NsIRh4HEh:S1ONtyBeSFkXV1etEKLlWUTOfeiRA2Ry

Score
10/10
minerupxxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d80ea1b206acd6785dd8e54eaa5f74c0_NEIKI
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections