Overview

overview

10

Static

static

10

b3766fa0d8...KI.exe

windows7-x64

10

b3766fa0d8...KI.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    b3766fa0d830c469b4cbda073aa9a680_NEIKI

  • Size

    1.5MB

  • MD5

    b3766fa0d830c469b4cbda073aa9a680

  • SHA1

    70987d9fda2bbfb676fe5577afb1a94744311753

  • SHA256

    4727c80e3bb7708c1e42364f2799eb5bad88ff21ee8846e8fa32528989d5289c

  • SHA512

    93c499dc0cd4d6c014df3a4ca6d88bfda7311a5b346887aca7aab302f447fce7908d8b614166ede6003855f273ffcf0af0568b6c42779fd461eb2cac43b59f6e

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlGC78XCGiApn/ROmvG8rCZiPj:knw9oUUEEDlGUrGiAl/+M

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • b3766fa0d830c469b4cbda073aa9a680_NEIKI
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections