Overview

overview

10

Static

static

10

6187347420...KI.exe

windows7-x64

10

6187347420...KI.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    61873474207f7c33e63f2f13e317c000_NEIKI

  • Size

    1.4MB

  • MD5

    61873474207f7c33e63f2f13e317c000

  • SHA1

    ead68f5cd7300af9e28a5fc094f515fa6c31990c

  • SHA256

    561db7ab88efbaea066c026d4141a76e020b30bf9c67243680ab2fd8642b88b5

  • SHA512

    33a7db0c610a4354273b7e61f3ebc71a8bdba9ce9e9728317b6a17f184b3dddc52c5b87d72920d08ef6db2f4a920caa69ede0b03b08011fe3fe943208062d22c

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlWXWZ5PbcmC3f/8lkKJhlsr3Pz00cCZmi8v0:knw9oUUEEDl37jcmWH8SKJhS34v0

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 61873474207f7c33e63f2f13e317c000_NEIKI
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections