Overview

overview

10

Static

static

10

5bed67a602...KI.exe

windows7-x64

10

5bed67a602...KI.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    5bed67a6026bc5f6fbc963450f7ac7d0_NEIKI

  • Size

    2.7MB

  • MD5

    5bed67a6026bc5f6fbc963450f7ac7d0

  • SHA1

    49c73a5a41814287273923bc6943abe98b4e5393

  • SHA256

    7dc70ac162262b8b73e1c178fda7579964aaad7a4853e7f8c24dd174f6f0222f

  • SHA512

    516d2f659c984cc710f29e4a5997a5b466b2a12996e75906409e8dc01e29bae00cfad69e5c7074c23e8850ae039dfdc0e0cf0cb0f0b56e0e52c0277c4b40cdaf

  • SSDEEP

    49152:BezaTF8FcNkNdfE0pZ9ozt4wIQ56uL3pgrCEdTKUHiCyI8BUs91Qo+56:BemTLkNdfE0pZrQ56utg6

Score
10/10
minerupxxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 5bed67a6026bc5f6fbc963450f7ac7d0_NEIKI
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections