Overview

overview

10

Static

static

10

dd68679d3b...KI.exe

windows7-x64

10

dd68679d3b...KI.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    dd68679d3bcc80bbc8391221df0c1de0_NEIKI

  • Size

    1.8MB

  • MD5

    dd68679d3bcc80bbc8391221df0c1de0

  • SHA1

    b90337039ec606dd60edb54cbffc3e33993c914b

  • SHA256

    8af2787b7896a9b60d66ba1e29cdf7dc0d789f158456163973ca646a978f0e39

  • SHA512

    1542b2ca2b26029e4820e56b4f524ab8f92b3699193f8770cbd7736188bdda60abef6464f29823352a16937ca8b92e2c44cadd7f8b91e7c34bbd1d7bfeb466d3

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlOqzJO0RAISLzV/vdH5e1BeA5gLDqsPTupL6k6hGNy:knw9oUUEEDlOuJkIQTAVsPYIgC6Ej

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • dd68679d3bcc80bbc8391221df0c1de0_NEIKI
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections