Overview

overview

10

Static

static

10

db8d585f42...cs.exe

windows7-x64

10

db8d585f42...cs.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    db8d585f42d09082b12d3a5a872e07b0_NeikiAnalytics

  • Size

    1.9MB

  • MD5

    db8d585f42d09082b12d3a5a872e07b0

  • SHA1

    e3c8ac88b1dd00d90c8f1fae5e3db17be49f8c45

  • SHA256

    23bc42430b2c64ee3ebd262bf9672fc558989a958d821f64f90e93ac708ff65e

  • SHA512

    4b9f2ca1e21e7c6902cb0e512e91ec907e5a9494797db0e3989670c68e2499146980acb278f8430946f1aaa01fbea312c2a6ba52ba9a094aef8405f9d9420644

  • SSDEEP

    49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6StnP:BemTLkNdfE0pZrwQ

Score
10/10
minerupxkpotxmrig

Malware Config

Signatures

  • KPOT Core Executable 1 IoCs
  • Kpot family
    kpot
  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • db8d585f42d09082b12d3a5a872e07b0_NeikiAnalytics
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections