Overview

overview

10

Static

static

10

1a277ae127...KI.exe

windows7-x64

10

1a277ae127...KI.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    1a277ae1271183c9f7f2991d937e6e50_NEIKI

  • Size

    1.8MB

  • MD5

    1a277ae1271183c9f7f2991d937e6e50

  • SHA1

    b948907123f6f57ddcb65ecaab480835ddd33d4f

  • SHA256

    0c3477589a9198c8aa318851ba02306cd5ed785345d0a74da64a7f499e7e2f4b

  • SHA512

    4316b2f9146d347d5a8f6b37055b07cd2a65a6306c233dd25ba50b52e53166c959d37e812cf3d8ce83403fd938d2e16d620fc52ad0ba28e45c85f50d97991c39

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlWXWZ5PbcmC3f/DFNkTQbOF+sabJKMC+DA7L0GgHoS:knw9oUUEEDl37jcmWH/xbnbJo+kULHee

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 1a277ae1271183c9f7f2991d937e6e50_NEIKI
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections