Overview

overview

10

Static

static

10

e673168b8a...KI.exe

windows7-x64

10

e673168b8a...KI.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    e673168b8aa67b4734b8eae802aa38b0_NEIKI

  • Size

    1.9MB

  • MD5

    e673168b8aa67b4734b8eae802aa38b0

  • SHA1

    3d27f6ac34958a0abbfb906daddd2a6795f0f6d9

  • SHA256

    d488c035cb8dadb3c245ad5d1b966e7c15346f5b0b6e3655e3034cce87663269

  • SHA512

    fbdcd4200dd687171e0e726ab56a5639fe9ded93f71b0856b91ffd4eb5d3781f2bcc55ea657765c4040266c1f4dd142379cc4de6da1348fa88285c0deb3ac1cd

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82S5k7ck:NABT

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • e673168b8aa67b4734b8eae802aa38b0_NEIKI
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections