Overview

overview

10

Static

static

10

fa51b1a38d...KI.exe

windows7-x64

10

fa51b1a38d...KI.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    fa51b1a38d2a3b7a4190e5a3c8f82850_NEIKI

  • Size

    1.1MB

  • MD5

    fa51b1a38d2a3b7a4190e5a3c8f82850

  • SHA1

    ad43f76c89338d40e24993f2aee99ddebaf5e69a

  • SHA256

    146835b50757a5c3051639e5c1a55a2fae6d982a5973f51d92fd6dcbc432c076

  • SHA512

    089196bb2828b380792c1fb2ec4200c5bc5bac0ec957f8589919626439208fe00376fd8dc0ebc775439de78c3fbdbc9f11de6651f4aa2a8bb2063502ab2b5eaf

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlWXWZ5Pbcq92zMWQ5uajaT6:knw9oUUEEDl37jcq4QR

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • fa51b1a38d2a3b7a4190e5a3c8f82850_NEIKI
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections