General

  • Target

    unMiner.zip

  • Size

    177.1MB

  • MD5

    0cd177f3065ae6c9eb796b01b2095ede

  • SHA1

    6e3ed3fbeb825c4ceccf56dd89c7edc9a2adaf04

  • SHA256

    8f58a013f9e519b5d146aa184723d86e300ddfb114f2d22dfeefe710ba041d32

  • SHA512

    12105345fd2204566d6dd8b16ccad0c096327f6f2cd4d96552fbb09c7b22fc09980727e6eeabf008f124d8ef7a2faca1f5236e2ee98ad1b24cf713ce6b06bfde

  • SSDEEP

    3145728:o20bBMHFcQhHRTz5M1HJ1oTNK/KB7OJvDnjUdxuQW+TQGwVuRwrjxkcY34k426XU:2BccQVRf54p1oTAFvGxuCyrrk4zYEJGX

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 2 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 20 IoCs

    Checks for missing Authenticode signature.

Files

  • unMiner.zip
    .zip
  • unMiner/LICENSE.electron.txt
  • unMiner/LICENSES.chromium.html
  • unMiner/Uninstall unMiner.exe
    .exe windows:4 windows x86 arch:x86

    b34f154ec913d2d2c435cbd644e91687


    Headers

    Imports

    Sections

  • $PLUGINSDIR/StdUtils.dll
    .dll windows:5 windows x86 arch:x86

    7b79709c0d5576549eb261e3410f95f8


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    fc0224e99e736751432961db63a41b76


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UAC.dll
    .dll windows:4 windows x86 arch:x86

    0ef725341a4aecf8398c0e2132f38049


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/WinShell.dll
    .dll windows:4 windows x86 arch:x86

    a75c904bad153f5af2c37cfdf66eba5c


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    6b5c4f7d679059f68f1269aad3a5cecd


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsExec.dll
    .dll windows:4 windows x86 arch:x86

    d31c5eb927119d00232e4d4b0e32fcdb


    Headers

    Imports

    Exports

    Sections

  • unMiner/chrome_100_percent.pak
  • unMiner/chrome_200_percent.pak
  • unMiner/d3dcompiler_47.dll
    .dll windows:10 windows x64 arch:x64

    824d17f150756620b70aa929623006bb


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • unMiner/ffmpeg.dll
    .dll windows:5 windows x64 arch:x64

    b8f7d0e0f83de4cae7f7fece4a2f750e


    Headers

    Imports

    Exports

    Sections

  • unMiner/icudtl.dat
  • unMiner/libEGL.dll
    .dll windows:5 windows x64 arch:x64

    473add2829e325fddbfbed09790ab4d8


    Headers

    Imports

    Exports

    Sections

  • unMiner/libGLESv2.dll
    .dll windows:5 windows x64 arch:x64

    a4ae784476450d7024fc64bf409f952d


    Headers

    Imports

    Exports

    Sections

  • unMiner/locales/am.pak
  • unMiner/locales/ar.pak
  • unMiner/locales/bg.pak
  • unMiner/locales/bn.pak
  • unMiner/locales/ca.pak
  • unMiner/locales/cs.pak
  • unMiner/locales/da.pak
  • unMiner/locales/de.pak
  • unMiner/locales/el.pak
  • unMiner/locales/en-GB.pak
  • unMiner/locales/en-US.pak
  • unMiner/locales/es-419.pak
  • unMiner/locales/es.pak
  • unMiner/locales/et.pak
  • unMiner/locales/fa.pak
  • unMiner/locales/fi.pak
  • unMiner/locales/fil.pak
  • unMiner/locales/fr.pak
  • unMiner/locales/gu.pak
  • unMiner/locales/he.pak
  • unMiner/locales/hi.pak
  • unMiner/locales/hr.pak
  • unMiner/locales/hu.pak
  • unMiner/locales/id.pak
  • unMiner/locales/it.pak
  • unMiner/locales/ja.pak
  • unMiner/locales/kn.pak
  • unMiner/locales/ko.pak
  • unMiner/locales/lt.pak
  • unMiner/locales/lv.pak
  • unMiner/locales/ml.pak
  • unMiner/locales/mr.pak
  • unMiner/locales/ms.pak
  • unMiner/locales/nb.pak
  • unMiner/locales/nl.pak
  • unMiner/locales/pl.pak
  • unMiner/locales/pt-BR.pak
  • unMiner/locales/pt-PT.pak
  • unMiner/locales/ro.pak
  • unMiner/locales/ru.pak
  • unMiner/locales/sk.pak
  • unMiner/locales/sl.pak
  • unMiner/locales/sr.pak
  • unMiner/locales/sv.pak
  • unMiner/locales/sw.pak
  • unMiner/locales/ta.pak
  • unMiner/locales/te.pak
  • unMiner/locales/th.pak
  • unMiner/locales/tr.pak
  • unMiner/locales/uk.pak
  • unMiner/locales/vi.pak
  • unMiner/locales/zh-CN.pak
  • unMiner/locales/zh-TW.pak
  • unMiner/resources.pak
    .js
  • unMiner/resources/app.asar
  • unMiner/resources/elevate.exe
    .exe windows:6 windows x86 arch:x86

    c3afe98a750f2d4f1ed5d2ac323cb5e0


    Headers

    Imports

    Sections

  • unMiner/resources/miners/win32/SRBMiner-Multi-2-4-4/SRBMiner-MULTI.exe
    .exe windows:4 windows x64 arch:x64


    Headers

    Exports

    Sections

  • unMiner/resources/miners/win32/lolMiner_1.82a/license.txt
  • unMiner/resources/miners/win32/lolMiner_1.82a/lolMiner.cfg
  • unMiner/resources/miners/win32/lolMiner_1.82a/lolMiner.exe
    .exe windows:6 windows x64 arch:x64


    Code Sign

    Headers

    Sections

  • unMiner/resources/miners/win32/onezerominer-win64-1.2.8/onezerominer.exe
    .exe windows:6 windows x64 arch:x64

    32c1019de10dda3c1b518c11de2999af


    Headers

    Imports

    Exports

    Sections

  • unMiner/resources/miners/win32/t-rex-0.26.8-win/t-rex.exe
    .exe windows:6 windows x64 arch:x64

    54d0b38d31926588f0d34b928f49a004


    Headers

    Imports

    Exports

    Sections

  • unMiner/resources/miners/win32/xmrig-6.19.2/SHA256SUMS
  • unMiner/resources/miners/win32/xmrig-6.19.2/WinRing0x64.sys
    .sys windows:6 windows x64 arch:x64

    d41fa95d4642dc981f10de36f4dc8cd7


    Code Sign

    Headers

    Imports

    Sections

  • unMiner/resources/miners/win32/xmrig-6.19.2/benchmark_10M.cmd
  • unMiner/resources/miners/win32/xmrig-6.19.2/benchmark_1M.cmd
  • unMiner/resources/miners/win32/xmrig-6.19.2/config.json
  • unMiner/resources/miners/win32/xmrig-6.19.2/pool_mine_example.cmd
  • unMiner/resources/miners/win32/xmrig-6.19.2/rtm_ghostrider_example.cmd
  • unMiner/resources/miners/win32/xmrig-6.19.2/solo_mine_example.cmd
  • unMiner/resources/miners/win32/xmrig-6.19.2/start.cmd
  • unMiner/resources/miners/win32/xmrig-6.19.2/xmrig.exe
    .exe windows:4 windows x64 arch:x64

    16bb67d62ee484974f9392fc52c45722


    Headers

    Imports

    Sections

  • unMiner/snapshot_blob.bin
  • unMiner/swiftshader/libEGL.dll
    .dll windows:5 windows x64 arch:x64

    a9e49d20df10f15c9224d2a4846c15d0


    Headers

    Imports

    Exports

    Sections

  • unMiner/swiftshader/libGLESv2.dll
    .dll windows:5 windows x64 arch:x64

    957c979fb8f5a24d19c4ab4a923f6738


    Headers

    Imports

    Exports

    Sections

  • unMiner/unMiner.exe
    .exe windows:5 windows x64 arch:x64

    7e2949b9fbbf61e40fd084d6af8a58a9


    Headers

    Imports

    Exports

    Sections

  • unMiner/v8_context_snapshot.bin
  • unMiner/vk_swiftshader.dll
    .dll windows:5 windows x64 arch:x64

    f21c39c1e6957553de5c6b716a78e5af


    Headers

    Imports

    Exports

    Sections

  • unMiner/vk_swiftshader_icd.json
  • unMiner/vulkan-1.dll
    .dll windows:5 windows x64 arch:x64

    04a2de43d6724a1a52ec06f045f88902


    Headers

    Imports

    Exports

    Sections