Overview

overview

10

Static

static

10

f58d8b875a...KI.exe

windows7-x64

10

f58d8b875a...KI.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    f58d8b875a2b3f96aed1f11d34e175b0_NEIKI

  • Size

    2.7MB

  • MD5

    f58d8b875a2b3f96aed1f11d34e175b0

  • SHA1

    506acb409f76c83147c646be82e054e62b7f089f

  • SHA256

    c80be22531f0dc7fed3ad6a5eab59f38caa6a7784d30f853bb070994cc6800b6

  • SHA512

    2b797dcc3d61427a0c83e38912b81fc5d9831fdb00cf9f990b5b6a25ac3ca2eefc97c14aba9e0d3aa0b265b1a011ff08a7b72a256d4eb63c24dc6e006a38a9af

  • SSDEEP

    49152:S1G1NtyBwTI3ySZbrkXV1etEKLlWUTOfeiRA2R76zHrWax9hMkFfdgIZohteh:S1ONtyBeSFkXV1etEKLlWUTOfeiRA2RW

Score
10/10
minerupxxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f58d8b875a2b3f96aed1f11d34e175b0_NEIKI
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections