Overview

overview

10

Static

static

10

169db98d3a...KI.exe

windows7-x64

10

169db98d3a...KI.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    169db98d3ad5750591de239f9607b640_NEIKI

  • Size

    1.9MB

  • MD5

    169db98d3ad5750591de239f9607b640

  • SHA1

    6f8e6f98a3afaac7d47874e39ba60d09192ffb69

  • SHA256

    b3e3517a711039691bc927d69272911d62ef7c5ef07258ad080c0ca5fb3f5490

  • SHA512

    4d861e8c6a105ca4880ff91f2e133e16e41d64f2063ffc6100a77e5eface5273a2912b90f9595513f8c624ce7f53b1e537fe46c29278c8a7df2188a3c71abef6

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82g1V6Gmjx9:NABP

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 169db98d3ad5750591de239f9607b640_NEIKI
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections