Overview

overview

10

Static

static

10

471d802a52...KI.exe

windows7-x64

10

471d802a52...KI.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    471d802a523297b43056e1f04ff35590_NEIKI

  • Size

    1.6MB

  • MD5

    471d802a523297b43056e1f04ff35590

  • SHA1

    d34676280c63e9d5ab1c1f9a86e921319a0e101b

  • SHA256

    dbbdc5249d7e23a0a209a44836938ea9c814ede872be86f130e525f42884a090

  • SHA512

    8ea40e0f2d6989952e8de9b995e414d40525db2e1d1bcc6dab5711526c287d5bf5cf802ee0ab613c99f2e9ce60c452103f5d6c08a0c67b8458d5d50ac40f9477

  • SSDEEP

    49152:GezaTF8FcNkNdfE0pZ9oztFwIi5aIwC+Agr6S/Fr:GemTLkNdfE0pZaQI

Score
10/10
minerkpotxmrig

Malware Config

Signatures

  • KPOT Core Executable 1 IoCs
  • Kpot family
    kpot
  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 471d802a523297b43056e1f04ff35590_NEIKI
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections