Overview

overview

10

Static

static

10

4d8c73cc9c...KI.exe

windows7-x64

10

4d8c73cc9c...KI.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4d8c73cc9ca1fa2d9dfae1094aa6fa50_NEIKI

  • Size

    1.2MB

  • MD5

    4d8c73cc9ca1fa2d9dfae1094aa6fa50

  • SHA1

    49fdc52e824c62ea1d5dd42f75cf6b97734481b6

  • SHA256

    64a108c95c785e348f13659b6e2898898b7423a6aab00ba25e9923d8df87aeae

  • SHA512

    de165f29a2c60c94fed0d733a281633122671b22fe081ea380c2af1e32246341e16b23319ac7f633b5565cfb77b1ad6ae66b87397ca9a5b97d6f7ceaa0aef78f

  • SSDEEP

    24576:RVIl/WDGCi7/qkatXBF6727f8UhNnwSz7TD0SqKpTIr2ejZvU67NnX1vQS:ROdWCCi7/rahUUvlhqLr2+W4f

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 4d8c73cc9ca1fa2d9dfae1094aa6fa50_NEIKI
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections