Overview

overview

10

Static

static

10

c38c7e3b7a...KI.exe

windows7-x64

10

c38c7e3b7a...KI.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    c38c7e3b7a7d1298ae1d9436671ecc60_NEIKI

  • Size

    2.9MB

  • MD5

    c38c7e3b7a7d1298ae1d9436671ecc60

  • SHA1

    b31109bc6b02bda19c39adfc0c9e43b82f8509b3

  • SHA256

    eab2cb30ab1c6d1a7c9ca1c8c66e43ca9f3b39e49b53dfeef70ca979d5c0e544

  • SHA512

    2cc9f9f82c2dc3564c992a34d0f951180e6b498d74b8d800c230d1b40c0e712ba3c8b9076c94ae8104ad6cc4685d465bd8844e605b4ec56e4fc0031771c4dd87

  • SSDEEP

    49152:N0wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjcz8DzzxTMS8Tg3aIM4sc:N0GnJMOWPClFdx6e0EALKWVTffZiPAcv

Score
10/10
minerupxxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c38c7e3b7a7d1298ae1d9436671ecc60_NEIKI
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections