Overview

overview

10

Static

static

10

6f5af22cfe...KI.exe

windows7-x64

10

6f5af22cfe...KI.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    6f5af22cfe86e8938b1d95af1be48620_NEIKI

  • Size

    1.4MB

  • MD5

    6f5af22cfe86e8938b1d95af1be48620

  • SHA1

    486fe059c1abb9a7bfd7f388dfa29f4112404f63

  • SHA256

    869433f8b3279cf31c5a2c11d19b51774b6a4716ec0dfebd271fb23815722301

  • SHA512

    4d897a4dd221c9256c5521fc3a7d6c48495f24270af8926ebce0db244555c1a8cb58922e34a98debbc041079c427958a0514b3a6c0cc4ed600592b7dea25da71

  • SSDEEP

    24576:RVIl/WDGCi7/qkatXBF6727F15qbruh/lzapbFe6LmsD8JNHo4lup64Oh8WniuA:ROdWCCi7/rahlqOllgoJsT4gvmA

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 6f5af22cfe86e8938b1d95af1be48620_NEIKI
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections