Overview

overview

10

Static

static

10

64e6498593...KI.exe

windows7-x64

10

64e6498593...KI.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    64e6498593218908a61a5e25d6693000_NEIKI

  • Size

    1.4MB

  • MD5

    64e6498593218908a61a5e25d6693000

  • SHA1

    ba5e929f784ddb091ce374cdbaa98ee494efc869

  • SHA256

    1066ba9351776745b5badfa963f5c473ffe4014faf4fc5336d7b5790ffc4a649

  • SHA512

    4310682ce7ddd5f03dd0f2f48c9192b82423d2da3d3099d0ed97a949b637864fac965da28002829337057615f31c45d5b9901502db553423f834915d5d328c08

  • SSDEEP

    24576:RVIl/WDGCi7/qkatXBF6727F15qbruh/lzapbFe6LmsD8JNHo4lup64Oh8Wni6G:ROdWCCi7/rahlqOllgoJsT4gvm2

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 64e6498593218908a61a5e25d6693000_NEIKI
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections