Overview

overview

10

Static

static

10

a6058bbc39...KI.exe

windows7-x64

10

a6058bbc39...KI.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a6058bbc39b94214b0ad7c88eee69550_NEIKI

  • Size

    1.4MB

  • MD5

    a6058bbc39b94214b0ad7c88eee69550

  • SHA1

    de913fac61f1ef6227f7232aba2fd82f21af9d8c

  • SHA256

    793111deabb15345a7217b7754375d7966452d65792ce96dd5bcb1be21e920da

  • SHA512

    fd768c6cfd193d326cee91e776a2450b0e88aff774c9ed9b50ed2daf0c7798e66b340e280c815cf2cbe82dae57e22516caf0cb88a50b08b512ed4ee0da34bd6b

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlWXWZ5Pbcq92zoSD9loVolf1p9pGGc0:knw9oUUEEDl37jcq4faVS3wu

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • a6058bbc39b94214b0ad7c88eee69550_NEIKI
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections