Overview

overview

10

Static

static

10

f5cdb0b8e0...KI.exe

windows7-x64

10

f5cdb0b8e0...KI.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    f5cdb0b8e02a46f8d9d1f5907074e1e0_NEIKI

  • Size

    1.3MB

  • MD5

    f5cdb0b8e02a46f8d9d1f5907074e1e0

  • SHA1

    037a8f9630fffa38aa189b356d84e661758d34bd

  • SHA256

    b66eb6ff1e10d6aa439561ab9a02cf3a83ec9da3a3763374831626fb04bdfd6e

  • SHA512

    6e7c622b9c068cc5d7fdeaf2b7c8f2c8ff33967df4f316b5b673ea9ccdab649ce436ba90d60f338f0d4e6572687ad79c415cc097f96e2430f38eeaddac857526

  • SSDEEP

    24576:RVIl/WDGCi7/qkatXBF6727vrNaT/6CFdDQC7FY5ANGrTQYkbb8RfSGgg2uxqC2:ROdWCCi7/rahW/zFdDEANWQYkbe9qC2

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • f5cdb0b8e02a46f8d9d1f5907074e1e0_NEIKI
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections