Overview

overview

10

Static

static

10

0228e63f14...KI.exe

windows7-x64

10

0228e63f14...KI.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    0228e63f149fde336af9ecf0de07d9e0_NEIKI

  • Size

    1.4MB

  • MD5

    0228e63f149fde336af9ecf0de07d9e0

  • SHA1

    380fb930eced408c7dfd92095278ba5b2f7a878f

  • SHA256

    1c20d0058504d93f39f0bd2951c0ff0ee4b931e45298432d44b3562f87c2fcdc

  • SHA512

    3328783e1c48d5a04077ecfae77550de506a08c7ec5f029adf2d99f1fa92ae72a7937a91bfccb7b4996f012faa6383f1ec83070c442cd39d4c1961fe280e3683

  • SSDEEP

    24576:BezaTnG99Q8FcNrpyNdfE0bLBgDOp2iSLz9LbEwlKjpv32wTMcMn3hJmE1sVs2:BezaTF8FcNkNdfE0pZ9ozt4wIXIZbdOb

Score
10/10
minerupxxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0228e63f149fde336af9ecf0de07d9e0_NEIKI
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections