Overview

overview

10

Static

static

10

c12589aa02...KI.exe

windows7-x64

10

c12589aa02...KI.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    c12589aa02461d62d45f1c398b7c9740_NEIKI

  • Size

    1.9MB

  • MD5

    c12589aa02461d62d45f1c398b7c9740

  • SHA1

    1d09563c4aca5370da7c7a0502451840c915ed0a

  • SHA256

    089fbe23d6239e03aa7721464c1e7555aea8c4d2bad7c6f4c2aaec17d0327e38

  • SHA512

    9e8b1ecbbace8545c1f6e38e2ebe1eaad608cc63e92942556361fe7755326bb31072914e8e20aac5aaf00ff5ddc411af313a4d63bf19af439c57f7e7ec5537c5

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlWXWZ5PbcmC3f/DFNkTQbOF+sabpZJ7qOtray2bPjM:knw9oUUEEDl37jcmWH/xbnb/btiTj9In

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • c12589aa02461d62d45f1c398b7c9740_NEIKI
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections