Overview

overview

10

Static

static

10

b9ad60652a...KI.exe

windows7-x64

10

b9ad60652a...KI.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    b9ad60652a5d001fc40767f33bc1a290_NEIKI

  • Size

    1.2MB

  • MD5

    b9ad60652a5d001fc40767f33bc1a290

  • SHA1

    be1abbd9941c8d6035d906e7dbd42c97b54d0351

  • SHA256

    497b12317325a6b2864638217196eab4b837b725e87952d51e8d33924b010e91

  • SHA512

    844ff6ce1a5cf16faddd75d44e5937caba36d68a139a1fce8fac1b93f1456e5c72f645396dc4c691bff0543b4277856e1e78422f9d03c19d4b61f0ea3b9bb8ba

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlWXWZ5PbcqgC0qKpTIvGoJ8JIFB:knw9oUUEEDl37jcqAqLl8o

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • b9ad60652a5d001fc40767f33bc1a290_NEIKI
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections