Overview

overview

10

Static

static

10

2c19375bd8...KI.exe

windows7-x64

10

2c19375bd8...KI.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    2c19375bd8f8be365149c69ed1c7c020_NEIKI

  • Size

    1.9MB

  • MD5

    2c19375bd8f8be365149c69ed1c7c020

  • SHA1

    376c789cef97f8ab76144d4f11620452d1d41b5d

  • SHA256

    3b2bda9dd689640433129d6e5aa480155040dede6faf81e8e44ca98e66c83961

  • SHA512

    3f0c78904b63a323b8e7b9ca6e0bbcf106c018173e54d3eb36d581eba1b739bfeeea1f30db799cae4870245309813cc0593aed11fd0a5ea7000e3453fc5b4d61

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlGC78XIO6zRIhRmuSOgOVGf6GrTcjXpoCf+O+a1A59:knw9oUUEEDlGUh+hN4SW+3+ZpB

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2c19375bd8f8be365149c69ed1c7c020_NEIKI
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections