Overview

overview

10

Static

static

10

1b0bcfc578...KI.exe

windows7-x64

10

1b0bcfc578...KI.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    1b0bcfc578099d082bfc14d7af8a6f40_NEIKI

  • Size

    1.2MB

  • MD5

    1b0bcfc578099d082bfc14d7af8a6f40

  • SHA1

    0b05c710b6b250c724bcfdf70fc2ac6d28c7e361

  • SHA256

    921e30eb78ff33c897001b001af86ee682ce77d1e0a0ea6f962dc57cb28db222

  • SHA512

    096c74540f5e1b612324182f75a6f6cd521a576771f368d91ca9d14400eecdc7a00c60d6c045d0c3b028c84f78ad8260837ecb111473df8f41048d71466b8ff3

  • SSDEEP

    24576:RVIl/WDGCi7/qkat6Q5aILMCfmARvKYYtJh1AahyzRRA3G:ROdWCCi7/raZ5aIwC+A8Jh1AahUd

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 1b0bcfc578099d082bfc14d7af8a6f40_NEIKI
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections