Overview

overview

10

Static

static

10

01c63e44cf...KI.exe

windows7-x64

10

01c63e44cf...KI.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    01c63e44cf5a3bdf30b8cc3ad53c8f70_NEIKI

  • Size

    1.6MB

  • MD5

    01c63e44cf5a3bdf30b8cc3ad53c8f70

  • SHA1

    06a27554d3b599198a2689b1092f5327a04e2614

  • SHA256

    b5264146bd3f35f427afb92d99ce57d58bd6d162af4412416d9daebdda31a2b5

  • SHA512

    fd1bed56ff1f7125774fd8b6ff842a9bb572760f14ca8f6564b12d8f13a86acb12d050bc21a69569254863a8f1c15b91f736640be92909a2bc6242ffa250ed95

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlGC78XIHbAYhbc8lFad+tsytA7W79KvYK9+u2tn:knw9oUUEEDlGUJ8Y9c87MQUSP

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 01c63e44cf5a3bdf30b8cc3ad53c8f70_NEIKI
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections