Overview

overview

10

Static

static

10

2d886d1bf0...cs.exe

windows7-x64

10

2d886d1bf0...cs.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    2d886d1bf08bd8d4aa649bc70b4ae670_NeikiAnalytics

  • Size

    1.5MB

  • MD5

    2d886d1bf08bd8d4aa649bc70b4ae670

  • SHA1

    8d1b4247e0927cecb46172940fdd58abe62ed838

  • SHA256

    20deb14b1d62285a304b86df7c465393d364758fe6d13981575c1fec5d7ba41a

  • SHA512

    7360bcaabe52b5a01e9bc693f6c35b53bcaa4996f4ae91f845399676220deb6a86882e09836bf268b083a33ac22efa32366c2cbfd8ace0627ba4c852f61f7d09

  • SSDEEP

    49152:ROdWCCi7/raZ5aIwC+Agr6g81p1vsrNi8:RWWBibyk

Score
10/10
upxminerkpotxmrig

Malware Config

Signatures

  • KPOT Core Executable 1 IoCs
  • Kpot family
    kpot
  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2d886d1bf08bd8d4aa649bc70b4ae670_NeikiAnalytics
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections