Overview

overview

10

Static

static

10

fd78a3c717...KI.exe

windows7-x64

10

fd78a3c717...KI.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    fd78a3c717e24605433f6c3cde55b800_NEIKI

  • Size

    1.5MB

  • MD5

    fd78a3c717e24605433f6c3cde55b800

  • SHA1

    36f3a131f9b27b76590e80daa80c9903229b0a21

  • SHA256

    4b57228d5a9e705614469acaf19ebe5f36ae61a2ab49e19bd1168945b6724674

  • SHA512

    81b82248f74b3d95e48f8de35f2aa0539c3d5d740190381f705dd57afb761eee1bf3f3b8ba4e1d24b0c2d16cd265b9eff3ca423013499d992170367b1e948834

  • SSDEEP

    24576:RVIl/WDGCi7/qkatXBF6727F15qbruh/lzapbFe6LmsD8JNHo4lup64Oh8WniLle:ROdWCCi7/rahlqOllgoJsT4gvmH

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • fd78a3c717e24605433f6c3cde55b800_NEIKI
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections