Overview

overview

10

Static

static

10

4997065776...KI.exe

windows7-x64

10

4997065776...KI.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    49970657767a6985d4efe123e8a0b180_NEIKI

  • Size

    1.5MB

  • MD5

    49970657767a6985d4efe123e8a0b180

  • SHA1

    31d937ec7d88a03a753ba304c399d0f3ded78b7c

  • SHA256

    7ec05dae14a08ccd4e86a22d0b68dad48558f0d43438de91abf17a53dc27bd3a

  • SHA512

    0f806c0fb1d21cb7a7943378e4d486748b095c11869b5d78be4e0868ebc0c6f1da3941b6c79d378a835f9b1ff4b3ba884b42095e74042017fc8c689bf5372271

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PmK/lzapbU4w2DyA7lO1eANsT4Z8+89eV2hvyo:Lz071uv4BPm6lgVJUwD+89eVmyo

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 49970657767a6985d4efe123e8a0b180_NEIKI
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections