Overview

overview

10

Static

static

10

c0d0800e62...KI.exe

windows7-x64

10

c0d0800e62...KI.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    c0d0800e62cdcb18d658be9bcf0dbe00_NEIKI

  • Size

    951KB

  • MD5

    c0d0800e62cdcb18d658be9bcf0dbe00

  • SHA1

    00cbbff183e066abc9976be9762a989145646421

  • SHA256

    7f10bcc4f294217d51efa21c89e85eadb8cd73c07f46964796f9989b2ccd1cea

  • SHA512

    069bce746f4c0d9a0002f5dc6514218097c7ab73e11ad1c8d3d84dcbaf26b5caf7fae15aa8a4c0307727d3f0c6d6a7232b21b76292bfe37a40e561c5c94e6b69

  • SSDEEP

    24576:RVIl/WDGCi7/qkat6zqxG2Z9mIhQvqLKcGuks:ROdWCCi7/raWMmths

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • c0d0800e62cdcb18d658be9bcf0dbe00_NEIKI
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections