General

  • Target

    TEST.zip

  • Size

    29.8MB

  • MD5

    384aac2016ef6672ffc725b84a714664

  • SHA1

    df15a32fd5047fbd16b72f255eaa1e8b6db5c636

  • SHA256

    9d1856fc96b165363227622c4f58fe6ad9ea2285c575488e262486b431c50ea4

  • SHA512

    dfaae5ec00cb5f48b5f955135332c29d774222c7b089cbdf99db83964f2909cfd67cc0ba71b60e84fe63f349a5145f3879ee3c4e42bce0a31d534a56650559a4

  • SSDEEP

    393216:M4eDpK9PQ5IFqOyANks74DPp6OXrn5QC3ij4I+jkc8+NJkk8L27iCvKnIJGVmpS:M4cgFGq4DZXWyCP0Nt863KkGB

Score
3/10

Malware Config

Signatures

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • TEST.zip
    .zip
  • NHQM_v0.6.7.0\EIO.dll
    .dll windows:5 windows x64 arch:x64

    fb92eefda0b12adc7224e8c2bfcd8c92


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • NHQM_v0.6.7.0\IOMap64.sys
    .sys windows:6 windows x64 arch:x64

    4463e084dfd14f74158c0725d8f13b78


    Code Sign

    Headers

    Imports

    Sections

  • NHQM_v0.6.7.0\Ionic.Zip.Reduced.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • NHQM_v0.6.7.0\Microsoft.Win32.TaskScheduler.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • NHQM_v0.6.7.0\NiceHashQuickMiner.exe
    .exe windows:4 windows x64 arch:x64


    Code Sign

    Headers

    Sections

  • NHQM_v0.6.7.0\README.txt
  • NHQM_v0.6.7.0\WinRing0x64.sys
    .sys windows:6 windows x64 arch:x64

    d41fa95d4642dc981f10de36f4dc8cd7


    Code Sign

    Headers

    Imports

    Sections

  • NHQM_v0.6.7.0\changelog.txt
  • NHQM_v0.6.7.0\commands.json
  • NHQM_v0.6.7.0\excavator.exe
    .exe windows:6 windows x64 arch:x64

    dc4033d6812e3cfbf13bf75eb8597cf2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • NHQM_v0.6.7.0\licenses\LICENSE_ADL.txt
  • NHQM_v0.6.7.0\licenses\LICENSE_BOOST.txt
  • NHQM_v0.6.7.0\licenses\LICENSE_MBEVAND.txt
  • NHQM_v0.6.7.0\licenses\LICENSE_OPENSSL.txt
  • NHQM_v0.6.7.0\licenses\LICENSE_PASCAL.txt
  • NHQM_v0.6.7.0\licenses\LICENSE_TROMP.txt
  • NHQM_v0.6.7.0\licenses\LICENSE_XENONCAT.txt
  • NHQM_v0.6.7.0\licenses\LICENSE_log4net.txt
  • NHQM_v0.6.7.0\licenses\LICENSE_managedcuda.txt
  • NHQM_v0.6.7.0\licenses\LICENSE_websockets.txt
  • NHQM_v0.6.7.0\licenses\LICENSE_winring0x64.txt
  • NHQM_v0.6.7.0\licenses\LICENSE_xmrig.txt
  • NHQM_v0.6.7.0\licenses\excavator-EULA.txt
  • NHQM_v0.6.7.0\licenses\excavator-notice.txt
  • NHQM_v0.6.7.0\licenses\license_DotNetZip.json
  • NHQM_v0.6.7.0\licenses\license_taskscheduler.txt
  • NHQM_v0.6.7.0\log4net.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • NHQM_v0.6.7.0\octune\assets\arrow-down.f1ac8296.svg
  • NHQM_v0.6.7.0\octune\assets\arrow-left.902abb24.svg
  • NHQM_v0.6.7.0\octune\assets\dropdown.d9ec4588.svg
  • NHQM_v0.6.7.0\octune\assets\efficiency-white.6e1b1dff.svg
  • NHQM_v0.6.7.0\octune\assets\fan-orange.56b4c25f.svg
  • NHQM_v0.6.7.0\octune\assets\gear-orange.c93f1db6.svg
  • NHQM_v0.6.7.0\octune\assets\gpu-temp-white.7257d0f4.svg
  • NHQM_v0.6.7.0\octune\assets\gpu-white.852a020d.svg
  • NHQM_v0.6.7.0\octune\assets\index.302dc3bf.js
    .js
  • NHQM_v0.6.7.0\octune\assets\index.7fd0d3fa.css
  • NHQM_v0.6.7.0\octune\assets\logo-text-dark.f0b8647c.svg
  • NHQM_v0.6.7.0\octune\assets\minimize-in.f24aa904.svg
  • NHQM_v0.6.7.0\octune\assets\overclocking-orange.6051e921.svg
  • NHQM_v0.6.7.0\octune\assets\power-white.7cbf3d38.svg
  • NHQM_v0.6.7.0\octune\assets\settings.870659f6.svg
  • NHQM_v0.6.7.0\octune\assets\speed-white.f1d029f2.svg
  • NHQM_v0.6.7.0\octune\assets\ubuntu-300.273b9d2d.svg
    .xml
  • NHQM_v0.6.7.0\octune\assets\ubuntu-300.5d02319e.eot
  • NHQM_v0.6.7.0\octune\assets\ubuntu-300.ac69cf4b.woff2
  • NHQM_v0.6.7.0\octune\assets\ubuntu-300.caaf824b.ttf
  • NHQM_v0.6.7.0\octune\assets\ubuntu-300.e501fa68.woff
  • NHQM_v0.6.7.0\octune\assets\ubuntu-300italic.21782777.ttf
  • NHQM_v0.6.7.0\octune\assets\ubuntu-300italic.22912346.woff2
  • NHQM_v0.6.7.0\octune\assets\ubuntu-300italic.23ed8e5c.eot
  • NHQM_v0.6.7.0\octune\assets\ubuntu-300italic.3a6ca87b.woff
  • NHQM_v0.6.7.0\octune\assets\ubuntu-300italic.a4c9a28e.svg
    .xml
  • NHQM_v0.6.7.0\octune\assets\ubuntu-700.47cbb140.svg
    .xml
  • NHQM_v0.6.7.0\octune\assets\ubuntu-700.4a6994f0.eot
  • NHQM_v0.6.7.0\octune\assets\ubuntu-700.692782cf.woff
  • NHQM_v0.6.7.0\octune\assets\ubuntu-700.83bf027c.ttf
  • NHQM_v0.6.7.0\octune\assets\ubuntu-700.ed421611.woff2
  • NHQM_v0.6.7.0\octune\assets\ubuntu-regular.41e3b7f7.ttf
  • NHQM_v0.6.7.0\octune\assets\ubuntu-regular.66ade46c.svg
    .xml
  • NHQM_v0.6.7.0\octune\assets\ubuntu-regular.88beb13c.woff2
  • NHQM_v0.6.7.0\octune\assets\ubuntu-regular.8b5f2727.eot
  • NHQM_v0.6.7.0\octune\assets\ubuntu-regular.d6337732.woff
  • NHQM_v0.6.7.0\octune\assets\vram-temp-white.20a26ef2.svg
  • NHQM_v0.6.7.0\octune\assets\wizard-orange.a011bd0c.svg
  • NHQM_v0.6.7.0\octune\data.json
  • NHQM_v0.6.7.0\octune\favicon.ico
  • NHQM_v0.6.7.0\octune\index.html
    .html
  • NHQM_v0.6.7.0\websocket-sharp.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections