Overview

overview

10

Static

static

10

dc92d6f8ab...KI.exe

windows7-x64

10

dc92d6f8ab...KI.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    dc92d6f8ab031fa8e14c99a1254f14f0_NEIKI

  • Size

    1.4MB

  • MD5

    dc92d6f8ab031fa8e14c99a1254f14f0

  • SHA1

    786642f600e7cd852250e80aa8818b89ecad6bed

  • SHA256

    e4c198a2b6a4483240e6e7f630edf24714d44b660fb9c90d4b8f8a2ca87609bb

  • SHA512

    08a108a598aff1cba4dfc0a8b4a23feea324797183f3a1047cfd426cb4a918191697a76c8928db9fc5bcf8acf345d189b8146e75b15aba1bcb75aec95b3e4fc5

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlWXWZ5PbcmsQpv+ICPGNxqDd+l4hRsALb8AJ:knw9oUUEEDl37jcmnQ9x

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • dc92d6f8ab031fa8e14c99a1254f14f0_NEIKI
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections