Overview

overview

10

Static

static

10

ef3f44f97d...KI.exe

windows7-x64

10

ef3f44f97d...KI.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    ef3f44f97dcdd3f897f634a443ab49e0_NEIKI

  • Size

    1.3MB

  • MD5

    ef3f44f97dcdd3f897f634a443ab49e0

  • SHA1

    03be01ba61a6a0ccc4232428a7e7cb9fe1fedb28

  • SHA256

    50325e924844b995c342a0e8ff724f878e4ae906022f9cd03474e4568d61aab8

  • SHA512

    ca796cf6028a41d48cbbd4fd8d5a6a7b148960161baf37154f13197fb3613254706e4005768eca39cac710f9b6d3bd8ded95f0200244bf1401cc28bb42ddb3f5

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlWXWZ5PbcmC3f/8lkKJhlsr3Pz00cCZmkst:knw9oUUEEDl37jcmWH8SKJhS3M

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • ef3f44f97dcdd3f897f634a443ab49e0_NEIKI
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections