Overview

overview

10

Static

static

10

42a944a80d...cs.exe

windows7-x64

10

42a944a80d...cs.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    42a944a80d18c2088a74377276ca4bb0_NeikiAnalytics

  • Size

    1.9MB

  • MD5

    42a944a80d18c2088a74377276ca4bb0

  • SHA1

    0d2e7fbc581155c55cbde9e3f50222035969a7c6

  • SHA256

    4b342fed9b213697d3e77780e087bcf332de86d5facc6a2e75cbd3d78aeb8a71

  • SHA512

    1b05b4711afdef230bbe3bc200026fd4ef736aad7ecb3ad047a52e81a7d9cf25599080d4cb35c91822e12e4a4c946746b0ad9d20a7f82d20bd399233606cf8fb

  • SSDEEP

    49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6StVEn0ksH3:BemTLkNdfE0pZrwI

Score
10/10
minerupxkpotxmrig

Malware Config

Signatures

  • KPOT Core Executable 1 IoCs
  • Kpot family
    kpot
  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 42a944a80d18c2088a74377276ca4bb0_NeikiAnalytics
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections