Overview

overview

10

Static

static

10

ac8028a8d1...KI.exe

windows7-x64

10

ac8028a8d1...KI.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    ac8028a8d19cb39a32554fd8da0690d0_NEIKI

  • Size

    1.7MB

  • MD5

    ac8028a8d19cb39a32554fd8da0690d0

  • SHA1

    40b59ee63d90f23a318495b829d8f7cdf9ace4bc

  • SHA256

    0a8ae3145a3ac87235671649ba9ca2cc5950a09c9ae972973ba8dc9952f72c82

  • SHA512

    dd11b44fef80293c0094fc58120b94f2ff0af4987ef60cafabcc60d47922550d8e0d0cf35141d562bff48fb4a19544308b0d3de447cdfb0485a5f913ae9863ab

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlia+zzDwGpmbqD0CkG0L2tQZgGVsdz4+rjRLnDJYnx:knw9oUUEEDlnJ2k2ojqlfRpUExsd

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • ac8028a8d19cb39a32554fd8da0690d0_NEIKI
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections