Overview

overview

10

Static

static

10

0a1619c6a5...KI.exe

windows7-x64

10

0a1619c6a5...KI.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    0a1619c6a574d39c105f1156b5b041a0_NEIKI

  • Size

    1.3MB

  • MD5

    0a1619c6a574d39c105f1156b5b041a0

  • SHA1

    a467c37adeb8ba5618de2e89f9beb3ff6dbe61f1

  • SHA256

    25d6bfd241cffae385f070965b28a27fd5913190002c9dea601e62016b0ed4f8

  • SHA512

    3ac3e11bd172c41c001b07f268394b0304abf1e60c3d7ec5cb07d0bd8e5e7a5724bd53163b5bddfed2aa36f43f4be751032ee13e39b5678314dbd0b0953161bd

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlia+zW7rir+Yxr34KGxlTJeQlLfvhw0nQ9:knw9oUUEEDlZ6NsKGxlMQxeWQ9

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 0a1619c6a574d39c105f1156b5b041a0_NEIKI
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections