Overview

overview

10

Static

static

10

dfba6ba5ea...cs.exe

windows7-x64

10

dfba6ba5ea...cs.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    dfba6ba5ea05926e110383299043ed20_NeikiAnalytics

  • Size

    2.2MB

  • MD5

    dfba6ba5ea05926e110383299043ed20

  • SHA1

    bcb4c63fe827228af3f8c4af7983c0bca047416a

  • SHA256

    391e8870298751ab2f264ca8105a32f5052eb3138b3cb75abd5358b07ef7a5c7

  • SHA512

    3ba5403f935f54221d0c7d06f0cbf20035d7b59330252e2c70ef8a0129dc375ad3e9b45f5245ceaa42b63e4e854c2b9074dd3e44ba9faf3f143333fba0f044e8

  • SSDEEP

    49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6twjVDOaK:BemTLkNdfE0pZrwb

Score
10/10
minerupxkpotxmrig

Malware Config

Signatures

  • KPOT Core Executable 1 IoCs
  • Kpot family
    kpot
  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • dfba6ba5ea05926e110383299043ed20_NeikiAnalytics
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections