Overview

overview

10

Static

static

10

f322fb717c...KI.exe

windows7-x64

10

f322fb717c...KI.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    f322fb717c12ee0f30ec2fc5108f6c40_NEIKI

  • Size

    1.9MB

  • MD5

    f322fb717c12ee0f30ec2fc5108f6c40

  • SHA1

    c327a07f62f79eb56712ec4a19d0fa1ab9aa6ce9

  • SHA256

    05145449167085e9f04fc1b181642dc16d634520effe7049b4535236e5733138

  • SHA512

    2e949fe26c1be778b6e69ea323d8484bd723146d34cd77c1d23ad78781865ed4b4efa69def757d52f813ddf7b1650756710028c51f6c33542e372f02a50e27be

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlGC78XIHbAYhbcZ4GhX/dERVwURI6ElxjXbCwsLi+0:knw9oUUEEDlGUJ8Y9ctYVk6+vT9BhF

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • f322fb717c12ee0f30ec2fc5108f6c40_NEIKI
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections