Overview

overview

10

Static

static

10

f393562aaf...KI.exe

windows7-x64

10

f393562aaf...KI.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f393562aaf4e6c87b9b9a76ad5a9bb00_NEIKI

  • Size

    1.6MB

  • MD5

    f393562aaf4e6c87b9b9a76ad5a9bb00

  • SHA1

    dd9481781393ffa453bb1c2d984a06912f6c7cb2

  • SHA256

    78c077d1e7117baddd96d7406aa4ee5a8e07e5d3c39c0314aaefe14cf2ccb3ac

  • SHA512

    88b05058d60dfa7abded5f6d7196f958b8ccef5c9add1b53b79ab5c63c1cfdb4e1d09306fa75ab65cfec1dfbd1c6d04c69678c054b60e2a2b596a63b8ff95199

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlWXWZ5PbcmC3f/DFNkTQb5/JFNRpc14MX4y6bg69t:knw9oUUEEDl37jcmWH/xbbFN/NMU

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • f393562aaf4e6c87b9b9a76ad5a9bb00_NEIKI
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections