Overview

overview

10

Static

static

10

a9df279d9b...KI.exe

windows7-x64

10

a9df279d9b...KI.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    a9df279d9bf38e4d4415bdfb86c05f60_NEIKI

  • Size

    1.1MB

  • MD5

    a9df279d9bf38e4d4415bdfb86c05f60

  • SHA1

    4cbebd537308c7f700a17d8ef3e74295099c1f6a

  • SHA256

    9d5441dbe1c01d056e01c9300b7c39ba33c2875707c33b18c976998ec2450353

  • SHA512

    bf9849aa9b155a88d718edc09d7526f8ae5cf2ced978df91f25c822288fcfa03c03b70e74b4b622ea38eed98199e3f9485db9d1d3bb58526f5b0db0e024636ef

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlia+zzDwkpm2qyOKOaErQC8jg+:knw9oUUEEDlnoO+C8h

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • a9df279d9bf38e4d4415bdfb86c05f60_NEIKI
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections