Overview

overview

10

Static

static

10

3499c07b9d...KI.exe

windows7-x64

10

3499c07b9d...KI.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    3499c07b9da6203a995bcbaac40a5130_NEIKI

  • Size

    1.8MB

  • MD5

    3499c07b9da6203a995bcbaac40a5130

  • SHA1

    1cc4857ca05db57807c84405e1aa5232bf705917

  • SHA256

    64cf96e51e674a64319b36a1eafd7f810a62d6712b4405b6b593737011b4125d

  • SHA512

    e3c3880ca416d138f959513da593fb0175f94f50aff8e006a4be50a9c4d6852f8f29b62bb6f3e6a5199ce054d77fd469539644cd3f523d93c60b543d4f7c7b47

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlGC78XIO6zRIhRmuSOgOVGf6GrTcjXpoCf+O+a1UqM:knw9oUUEEDlGUh+hN4SW+3+1qM

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 3499c07b9da6203a995bcbaac40a5130_NEIKI
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections