General

  • Target

    testsh-x3.zip

  • Size

    83.1MB

  • MD5

    b800b76d605c73c0357abcc8ac2fa49b

  • SHA1

    127b168de3aefb03d67d58a2aa9225f5703f0524

  • SHA256

    5e930eb0a0f6c8a1a06467dcb4b7314801aa9627c3e90676e69e4f37df16586f

  • SHA512

    6ce1105b8e5e3da4f28a739123b7e5250c4bd8b5b37fdc9baa88e0e77898ef0adbd7c8012ce2247072e1801cf648b776a38ed26f961cc36159133cc5f9d12453

  • SSDEEP

    1572864:/TAJmfsFi7I/4r+BEXadwDMxubpGzgNKb:w

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 64 IoCs
  • Xmrig family
  • Unsigned PE 32 IoCs

    Checks for missing Authenticode signature.

Files

  • testsh-x3.zip
    .zip
  • testsh-x3/5 (1).exe
    .exe windows:6 windows x64 arch:x64

    12806e48b853545b536463546db4baa1


    Headers

    Imports

    Sections

  • testsh-x3/5 (10).exe
    .exe windows:6 windows x64 arch:x64

    12806e48b853545b536463546db4baa1


    Headers

    Imports

    Sections

  • testsh-x3/5 (11).exe
    .exe windows:6 windows x64 arch:x64

    12806e48b853545b536463546db4baa1


    Headers

    Imports

    Sections

  • testsh-x3/5 (12).exe
    .exe windows:6 windows x64 arch:x64

    12806e48b853545b536463546db4baa1


    Headers

    Imports

    Sections

  • testsh-x3/5 (13).exe
    .exe windows:6 windows x64 arch:x64

    12806e48b853545b536463546db4baa1


    Headers

    Imports

    Sections

  • testsh-x3/5 (14).exe
    .exe windows:6 windows x64 arch:x64

    12806e48b853545b536463546db4baa1


    Headers

    Imports

    Sections

  • testsh-x3/5 (15).exe
    .exe windows:6 windows x64 arch:x64

    12806e48b853545b536463546db4baa1


    Headers

    Imports

    Sections

  • testsh-x3/5 (16).exe
    .exe windows:6 windows x64 arch:x64

    12806e48b853545b536463546db4baa1


    Headers

    Imports

    Sections

  • testsh-x3/5 (17).exe
    .exe windows:6 windows x64 arch:x64

    12806e48b853545b536463546db4baa1


    Headers

    Imports

    Sections

  • testsh-x3/5 (18).exe
    .exe windows:6 windows x64 arch:x64

    12806e48b853545b536463546db4baa1


    Headers

    Imports

    Sections

  • testsh-x3/5 (19).exe
    .exe windows:6 windows x64 arch:x64

    12806e48b853545b536463546db4baa1


    Headers

    Imports

    Sections

  • testsh-x3/5 (2).exe
    .exe windows:6 windows x64 arch:x64

    12806e48b853545b536463546db4baa1


    Headers

    Imports

    Sections

  • testsh-x3/5 (20).exe
    .exe windows:6 windows x64 arch:x64

    12806e48b853545b536463546db4baa1


    Headers

    Imports

    Sections

  • testsh-x3/5 (21).exe
    .exe windows:6 windows x64 arch:x64

    12806e48b853545b536463546db4baa1


    Headers

    Imports

    Sections

  • testsh-x3/5 (22).exe
    .exe windows:6 windows x64 arch:x64

    12806e48b853545b536463546db4baa1


    Headers

    Imports

    Sections

  • testsh-x3/5 (23).exe
    .exe windows:6 windows x64 arch:x64

    12806e48b853545b536463546db4baa1


    Headers

    Imports

    Sections

  • testsh-x3/5 (24).exe
    .exe windows:6 windows x64 arch:x64

    12806e48b853545b536463546db4baa1


    Headers

    Imports

    Sections

  • testsh-x3/5 (25).exe
    .exe windows:6 windows x64 arch:x64

    12806e48b853545b536463546db4baa1


    Headers

    Imports

    Sections

  • testsh-x3/5 (26).exe
    .exe windows:6 windows x64 arch:x64

    12806e48b853545b536463546db4baa1


    Headers

    Imports

    Sections

  • testsh-x3/5 (27).exe
    .exe windows:6 windows x64 arch:x64

    12806e48b853545b536463546db4baa1


    Headers

    Imports

    Sections

  • testsh-x3/5 (28).exe
    .exe windows:6 windows x64 arch:x64

    12806e48b853545b536463546db4baa1


    Headers

    Imports

    Sections

  • testsh-x3/5 (29).exe
    .exe windows:6 windows x64 arch:x64

    12806e48b853545b536463546db4baa1


    Headers

    Imports

    Sections

  • testsh-x3/5 (3).exe
    .exe windows:6 windows x64 arch:x64

    12806e48b853545b536463546db4baa1


    Headers

    Imports

    Sections

  • testsh-x3/5 (30).exe
    .exe windows:6 windows x64 arch:x64

    12806e48b853545b536463546db4baa1


    Headers

    Imports

    Sections

  • testsh-x3/5 (31).exe
    .exe windows:6 windows x64 arch:x64

    12806e48b853545b536463546db4baa1


    Headers

    Imports

    Sections

  • testsh-x3/5 (32).exe
    .exe windows:6 windows x64 arch:x64

    12806e48b853545b536463546db4baa1


    Headers

    Imports

    Sections

  • testsh-x3/5 (4).exe
    .exe windows:6 windows x64 arch:x64

    12806e48b853545b536463546db4baa1


    Headers

    Imports

    Sections

  • testsh-x3/5 (5).exe
    .exe windows:6 windows x64 arch:x64

    12806e48b853545b536463546db4baa1


    Headers

    Imports

    Sections

  • testsh-x3/5 (6).exe
    .exe windows:6 windows x64 arch:x64

    12806e48b853545b536463546db4baa1


    Headers

    Imports

    Sections

  • testsh-x3/5 (7).exe
    .exe windows:6 windows x64 arch:x64

    12806e48b853545b536463546db4baa1


    Headers

    Imports

    Sections

  • testsh-x3/5 (8).exe
    .exe windows:6 windows x64 arch:x64

    12806e48b853545b536463546db4baa1


    Headers

    Imports

    Sections

  • testsh-x3/5 (9).exe
    .exe windows:6 windows x64 arch:x64

    12806e48b853545b536463546db4baa1


    Headers

    Imports

    Sections

  • testsh-x3/SHA256SUMS
  • testsh-x3/WinRing0x64.sys
    .sys windows:6 windows x64 arch:x64

    d41fa95d4642dc981f10de36f4dc8cd7


    Code Sign

    Headers

    Imports

    Sections

  • testsh-x3/benchmark_10M.cmd
  • testsh-x3/benchmark_1M.cmd
  • testsh-x3/config.json
  • testsh-x3/pool_mine_example.cmd
  • testsh-x3/rtm_ghostrider_example.cmd
  • testsh-x3/solo_mine_example.cmd
  • testsh-x3/start.cmd