Overview

overview

10

Static

static

10

3b6f6b6c58...KI.exe

windows7-x64

10

3b6f6b6c58...KI.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    3b6f6b6c588de7d4bde79d3f63f34e80_NEIKI

  • Size

    1.5MB

  • MD5

    3b6f6b6c588de7d4bde79d3f63f34e80

  • SHA1

    5fe70d2d00a76ccfb9bd88abba84b76c0ed6f833

  • SHA256

    05d7783beee03805066f805e75b02d33c0ca5a57a3f936a2e6d1e346b6e7cce0

  • SHA512

    5fd22cd8eb915ba99555d00884e61dc14f96609b885c34a6a1750e11de88a43a5f0353b7d3e1a5f41e27c28b72039d7008ef17c58cafcbeea2b9bea5b95e010f

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlGC78XIHbAYhbcZ4GhX/dERVwURI62N0neaSmQk9Hi:knw9oUUEEDlGUJ8Y9ctYVk6CwGmG

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 3b6f6b6c588de7d4bde79d3f63f34e80_NEIKI
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections