Overview

overview

10

Static

static

10

fbd2ab7d9e...KI.exe

windows7-x64

10

fbd2ab7d9e...KI.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    fbd2ab7d9ed593514ad34a8d8fe3d220_NEIKI

  • Size

    3.9MB

  • MD5

    fbd2ab7d9ed593514ad34a8d8fe3d220

  • SHA1

    0c5ff85f535f4adaa092c61f516162352f562a9b

  • SHA256

    08d9a155df8dd233d3fc1b8dd77ce028fa044453b940cea36fab7d714f108402

  • SHA512

    2032aabbfce01be97b83181580aaabc83ede96cd495ad85b0c9978282d5c13fe71efcdeba0cbb6c1a43e1a98341b76f8e66c0552525d14ae8f2a45eb6d9f69a3

  • SSDEEP

    49152:ROdWCCi7/rah56uL3pgrCEdMKPFotsgEBr6GjvzW+UBA3Gd7po52xWKQY2x:RWWBibe56utgpPFotBER/mQJ

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • fbd2ab7d9ed593514ad34a8d8fe3d220_NEIKI
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections