Overview

overview

10

Static

static

10

618bf1b8d8...KI.exe

windows7-x64

10

618bf1b8d8...KI.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    618bf1b8d8acf9adfce9317cc6b6d320_NEIKI

  • Size

    2.7MB

  • MD5

    618bf1b8d8acf9adfce9317cc6b6d320

  • SHA1

    b6f873879a0264f417ce5f15aa0c0b1cd4ffe353

  • SHA256

    e6a194d732aa9ed31cbf0abc91abd781e4f4d1309f1598a85a91b277a0a5f2bc

  • SHA512

    b0dddb0dc0f264f910af51fbfe5662adb95ff0c14d1df28eb7f70c87531de9c3a98fc347f5ae4f70f3c8899826961b78109e44659ca4512450c312aa338f31d6

  • SSDEEP

    49152:S1G1NtyBwTI3ySZbrkXV1etEKLlWUTOfeiRA2R76zHrWax9hMkyW10/wKV7hjSeO:S1ONtyBeSFkXV1etEKLlWUTOfeiRA2Ry

Score
10/10
minerupxxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 618bf1b8d8acf9adfce9317cc6b6d320_NEIKI
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections