Overview

overview

10

Static

static

10

281ce6ed8b...KI.exe

windows7-x64

10

281ce6ed8b...KI.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    281ce6ed8bf7126844ef1ca9ec8a5380_NEIKI

  • Size

    1.9MB

  • MD5

    281ce6ed8bf7126844ef1ca9ec8a5380

  • SHA1

    7bf120f57fb900b313a3dbebf802f49e4b58fdc4

  • SHA256

    543c2b18ca54f819ac6690a2b151519f5f07d679e77f9099c088942c12628a87

  • SHA512

    c7aec951747ffd8da3f0156790f1f4436dc62dc29b6f02e8021e7e1a4f4d844d8b4be80ba060ceeec2544ea264a9910898728ac501d48f8c0f4d1376bbc53577

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlGC78XIO6zRIhRmuSOgOVGf6GrTLkFciI9R3HKjwv:knw9oUUEEDlGUh+hN4SWIOH9

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 281ce6ed8bf7126844ef1ca9ec8a5380_NEIKI
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections