General

  • Target

    pass_is_1.zip

  • Size

    33.4MB

  • MD5

    c465c8149cd5a244aee18785378cd057

  • SHA1

    16c5f15bfd219ee5f8f956175fdd62c637a250be

  • SHA256

    7bae4b2dc0a130c363f14626d98a9b20a98e725c5a2ca6a514a97b7488d4596f

  • SHA512

    f34cba095be535b5d3c8dc15b3d9458da289ee24616017f6a74c8908a909ab107f700dbdef7eccd5eaaf4b8763461275444ba1cfd6446b6488e958047b24e83f

  • SSDEEP

    786432:LLqAFtTJSPTD/5DhQs8CBvYfqXZ2QRZGnuJhxld72n:3FtU4JqXZRZ2ydan

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • pass_is_1.zip
    .zip

    Password: 1

  • miner/ALPH-herominers.bat
  • miner/ALPH-woolypooly.bat
  • miner/CFX-nanopool.bat
  • miner/CFX-woolypooly.bat
  • miner/ERGO-2miners.bat
  • miner/ERGO-herominers.bat
  • miner/ERGO-nanopool.bat
  • miner/ERGO-woolypooly.bat
  • miner/ETC+ALPH.bat
  • miner/ETC+ZIL-ezil.bat
  • miner/ETC-2miners.bat
  • miner/ETC-ISP-hidden-mode.bat
  • miner/ETC-woolypooly.bat
  • miner/ETHW+ALPH.bat
  • miner/ETHW+ZIL-ezil.bat
  • miner/ETHW-ethproxy.bat
  • miner/FIRO-2miners.bat
  • miner/FIRO-mintpond.bat
  • miner/FIRO-woolypooly.bat
  • miner/README.md
  • miner/RVN-2miners.bat
  • miner/RVN-ravenminer.bat
  • miner/RVN-woolypooly.bat
  • miner/SERO-serocash.bat
  • miner/VBK-reb0rn.bat
  • miner/VEIL-woolypooly.bat
  • miner/ZANO-luckypool.bat
  • miner/config_example
  • miner/help/API.md
  • miner/help/Dual mining.md
  • miner/help/FAQ.md
  • miner/help/LHR.md
  • miner/help/WebUI.md
  • miner/t-rex.exe
    .exe windows:6 windows x64 arch:x64

    Password: 1

    54d0b38d31926588f0d34b928f49a004


    Headers

    Imports

    Exports

    Sections

  • start.bat