Overview

overview

10

Static

static

10

dc320e3986...KI.exe

windows7-x64

10

dc320e3986...KI.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    dc320e39866c1525b2f00d289647f040_NEIKI

  • Size

    1.8MB

  • MD5

    dc320e39866c1525b2f00d289647f040

  • SHA1

    040839bd9246b83e2ed0dbb1124d205c2b8224b6

  • SHA256

    6d2a96ecb00636ae037cfdb48158ede3ae1f753b0180924658b5ad0074fd5605

  • SHA512

    83d0f25f7d3499c81da733d0bde8a3ce0951a4b418f4ee47e240f6889969a36cbc43611eb2a501b218d389a1865f7ab3f548518e8aba69d3071ce8ccd143be8c

  • SSDEEP

    24576:RVIl/WDGCi7/qkat6Q7W8bnngXEllvh7KPXcS15/g111PxvpF67jKVBBrMmIFbu+:ROdWCCi7/raZbbnlD52U7/dNpikSrKWV

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • dc320e39866c1525b2f00d289647f040_NEIKI
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections