Overview

overview

10

Static

static

10

fb54f665d1...KI.exe

windows7-x64

10

fb54f665d1...KI.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    fb54f665d1301e4f56ba33f04c393230_NEIKI

  • Size

    2.0MB

  • MD5

    fb54f665d1301e4f56ba33f04c393230

  • SHA1

    80a3f5eae3f85c115225ef1db20130cc7e6b4953

  • SHA256

    cf3ec1cd0fec32802bc3213bb7606fcfd7be48ae30a833db51e5168bef18ea54

  • SHA512

    a16ed1ed3bb85c471929c57e59142985b159bdfebcf56b907059d75399e5049d37d730eb25eb19ba7ffb07deaa907420aaaf67791d48d0507670ae86d3e79d0e

  • SSDEEP

    49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6SNbG:BemTLkNdfE0pZrwD

Score
10/10
minerupxkpotxmrig

Malware Config

Signatures

  • KPOT Core Executable 1 IoCs
  • Kpot family
    kpot
  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • fb54f665d1301e4f56ba33f04c393230_NEIKI
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections