Overview

overview

10

Static

static

10

3b6125a1e2...KI.exe

windows7-x64

10

3b6125a1e2...KI.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3b6125a1e2f73cb9afcb4a8e4dee7c40_NEIKI

  • Size

    1.4MB

  • MD5

    3b6125a1e2f73cb9afcb4a8e4dee7c40

  • SHA1

    cd1fd7a9ced14102b5ad1d2955f9829d161fd398

  • SHA256

    037f06741fab757b0dee2357c01bd9f538b12f4b3046f635a81564a15bd20c52

  • SHA512

    c687fcf3cf8f8f5813c5bd79e17300d70a196c052b03f64637520e68317fc4d3110e73a2d4181ba4f98715d3566b130efb70109beedadbc85a4d6b900461d4ea

  • SSDEEP

    24576:RVIl/WDGCi7/qkatXBF6727vrNaT/QonLbSP+Y70dCNulTHYs4A6RLQsvc/:ROdWCCi7/rahW/dLUoJlruRXe

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 3b6125a1e2f73cb9afcb4a8e4dee7c40_NEIKI
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections