Overview

overview

10

Static

static

10

20ac3a7f2e...KI.exe

windows7-x64

10

20ac3a7f2e...KI.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    20ac3a7f2ef52bce538a9f69dd3256c0_NEIKI

  • Size

    1.5MB

  • MD5

    20ac3a7f2ef52bce538a9f69dd3256c0

  • SHA1

    65d42284d6ae75f5efd84d45b497379d4acd4cf3

  • SHA256

    645c64023adfdcc2f0bacb01db7e0bf217bf085dea4291d63237f3342b6771c5

  • SHA512

    68d3aadc75c2e89077633f864c3d34c86d2570d7af4665a293bf32ff7d46e9522d14d10c856a1007dfe4208fc508e276fc718c4df6c7679991075c93db060e33

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlGC78XIHbAYhbcj9V+V64u7uU636heYsH8:knw9oUUEEDlGUJ8Y9c+MR63K

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 20ac3a7f2ef52bce538a9f69dd3256c0_NEIKI
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections