Overview

overview

10

Static

static

10

80333f1603...cs.exe

windows7-x64

10

80333f1603...cs.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    80333f1603b647e15dd6f19dea58ed60_NeikiAnalytics

  • Size

    1.8MB

  • MD5

    80333f1603b647e15dd6f19dea58ed60

  • SHA1

    e68fecc932405d1f118cecda45c1510b0f2c243a

  • SHA256

    d77b243e4eb31d87af67b97268df965547839d1cd2a64e9554eb3d7629f4754d

  • SHA512

    7a00afeeac8ac66b2d69db6032b74ab831d84683aeeb7cb772cfce7b79531c78eedd8f95023af0156781c39f20608f7d221855cf8cfc28e9c6a6a5e0c96d42a9

  • SSDEEP

    49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6StnB:BemTLkNdfE0pZrwc

Score
10/10
minerupxkpotxmrig

Malware Config

Signatures

  • KPOT Core Executable 1 IoCs
  • Kpot family
    kpot
  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 80333f1603b647e15dd6f19dea58ed60_NeikiAnalytics
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections