Overview

overview

10

Static

static

10

ad03846f9b...KI.exe

windows7-x64

10

ad03846f9b...KI.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ad03846f9b284bb17ed9e752cbf7f8c0_NEIKI

  • Size

    1.5MB

  • MD5

    ad03846f9b284bb17ed9e752cbf7f8c0

  • SHA1

    03597c369134b352891117ae1c3ae4b472fd2983

  • SHA256

    aaa1a57b70972692cab390d8ef6f06a42c76dafb3d4a5a98cf26ce48b750d45c

  • SHA512

    3c81c8ac13a3addf6c5bcd4b8acb89c0296db59effd52b1f05e9f424b55a03d681d9681ff561f21a2087beed5e3ba519d744b1a2dd1130e92915e14ddb243d5a

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkUCCWvLEvj7NaVNqd9OeSZXCdzvd4/iooIXsLq9Ua:Lz071uv4BPMkHC0IaSEzQR4iRLUUa

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • ad03846f9b284bb17ed9e752cbf7f8c0_NEIKI
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections