Overview

overview

10

Static

static

10

d366a9d5a5...cs.exe

windows7-x64

10

d366a9d5a5...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d366a9d5a5c948c08621386a8e2921e0_NeikiAnalytics

  • Size

    2.2MB

  • MD5

    d366a9d5a5c948c08621386a8e2921e0

  • SHA1

    54a9a55a2b66aeb7d1cc28b466fdacf7bb680337

  • SHA256

    f051394ca0b72749c7650514afd8d1a0cade15395e3edd0c608d23068f0885fa

  • SHA512

    62dfb799b2b974a3e6a09b085edf505c667741a798ebd14d295f9bc90682b9b964fb2f713128f7b02235c3649eb080feaed413de02405b026e257457692d555f

  • SSDEEP

    49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6twjVD7:BemTLkNdfE0pZrws

Score
10/10
minerupxkpotxmrig

Malware Config

Signatures

  • KPOT Core Executable 1 IoCs
  • Kpot family
    kpot
  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d366a9d5a5c948c08621386a8e2921e0_NeikiAnalytics
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections