Overview

overview

10

Static

static

10

fd54db5ba6...KI.exe

windows7-x64

10

fd54db5ba6...KI.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    fd54db5ba6f06cfe210e722e979b25d0_NEIKI

  • Size

    1.5MB

  • MD5

    fd54db5ba6f06cfe210e722e979b25d0

  • SHA1

    756dafe2933a6c02cac79ee3f3f83a657f8539fc

  • SHA256

    31734c24a0c3b983321605eb9071d8af352beb66d68aac1ff7dad62f58eec96b

  • SHA512

    b849247ae242ad957e0f2d2789e702ab7f7a23a2ea778113872556d94903053c0cb9342233f76d994b95c7f2e131cbd91ed3d73ff350ec0a34901dc9275e2183

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkUCCWvLEvjFkTVnfuDPFFWqreoY58SiAOkCVz7:Lz071uv4BPMkHC0IEFToChv6

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • fd54db5ba6f06cfe210e722e979b25d0_NEIKI
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections