Overview

overview

10

Static

static

10

fa5ef367ad...KI.exe

windows7-x64

10

fa5ef367ad...KI.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    fa5ef367ad8c6d22d883777ae7e1dc20_NEIKI

  • Size

    1.4MB

  • MD5

    fa5ef367ad8c6d22d883777ae7e1dc20

  • SHA1

    7881ed523a05034082af740bd16b6fe2a4cc1e7e

  • SHA256

    c158592708ebfc6864497a44683ed749630093d8e020bc2c82745fd04d0ee130

  • SHA512

    76c382787e058f4acdde84de4b791ec3d5e6a251d3d31879fb636ba2ea8cc2d910974fda4e2cf05b0b176f102e49df0834d53f8628216ff13f4d2c4ff2372203

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlGC78XIHbAYhbc9+DFMYAl8UywjPvYH:knw9oUUEEDlGUJ8Y9czYAlQkC

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • fa5ef367ad8c6d22d883777ae7e1dc20_NEIKI
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections