Overview

overview

10

Static

static

10

f6e3fa5dc8...KI.exe

windows7-x64

10

f6e3fa5dc8...KI.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    f6e3fa5dc8da7530079a8e7aa8c629c0_NEIKI

  • Size

    2.5MB

  • MD5

    f6e3fa5dc8da7530079a8e7aa8c629c0

  • SHA1

    f45e0c44029e63f5b9fac5e99d3ce6c1adf3cef9

  • SHA256

    167e86114ef8c16b6a7dbcd668386b9df17ab8c3a5338cb1db83954f82b194cf

  • SHA512

    6e533b607bb451e6057f0fa461af42202e22454558ea95690f36b52bddf84be0043509b2dc99dcb7bd314356336f2545fee3f6ae34cd6236e8317f75be2b160c

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82g1Vr5s1PTleLzI:NABF

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • f6e3fa5dc8da7530079a8e7aa8c629c0_NEIKI
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections