Overview

overview

10

Static

static

10

d277fc1922...KI.exe

windows7-x64

10

d277fc1922...KI.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    d277fc1922ff513fc05f6fcfb6644d60_NEIKI

  • Size

    1.5MB

  • MD5

    d277fc1922ff513fc05f6fcfb6644d60

  • SHA1

    065479d6d61675203e481e5a6dee9a9bf7df4ad7

  • SHA256

    b79c6fa13f8eb62b026bf041c0b138578aa2597dec6af7e48eea6c5758f7803b

  • SHA512

    272151e394fc52866fb15652842ee6b49680e37787aa9291cd84bccc212b4c8ad6826ecccaa1342f6de982edb1dd1cbe5d6ba241a13da7c94eaa847cbee88776

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlia+zzDwd+t56p6aGugPbxyOcGzlLX9V4OrRIhKEOW:knw9oUUEEDlnd+XRqgvzHIhKErHh

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • d277fc1922ff513fc05f6fcfb6644d60_NEIKI
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections