Overview

overview

10

Static

static

10

d00b8db477...KI.exe

windows7-x64

10

d00b8db477...KI.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    d00b8db477fd2f23c24594b51a897580_NEIKI

  • Size

    2.4MB

  • MD5

    d00b8db477fd2f23c24594b51a897580

  • SHA1

    bae0a99a71697e13aae1ee0424d81e21fb91d091

  • SHA256

    4a2277a35efff11793f535a62beb27f1369398dd2b0eb393903e761e4781ade0

  • SHA512

    193255084a84c5ab9332f4f33e0b0a9396c89294ada0c9f44c4f11ee0b1ba80d461a2c3ff61c9dfe406ee39898517d07abed168612d9e5efff8ded85ea2b6e32

  • SSDEEP

    49152:N0wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjcz8DzcCbH4bg:N0GnJMOWPClFdx6e0EALKWVTffZiPAcp

Score
10/10
minerupxxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d00b8db477fd2f23c24594b51a897580_NEIKI
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections