General

  • Target

    testsh-x12.zip

  • Size

    2.6MB

  • MD5

    f9959e2dd5aec1800a33fda2f4112378

  • SHA1

    50ab53772c1f069f4e1451814fb8dbaa305b3114

  • SHA256

    b63f61167e9e3070a5bc7b6513ead213276492af7932252981c8ded38b240bbb

  • SHA512

    6254a3883816db1f94327ac5edf2c831bd81f847460ae585b49474d3cd7dac637d789037af9760b8c09bfc3eee249be75a51dbda41551c26001be75adb10a082

  • SSDEEP

    49152:sC/efKtVdB1jjJy/q+bs4hgh3ElDpXQWNJdi7qLOgth8XlbuJ8cSYv:AKdFy/qtlh3mRpNJddSEcNcSYv

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 2 IoCs
  • Xmrig family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • testsh-x12.zip
    .zip
  • testsh-x12/SHA256SUMS
  • testsh-x12/WinRing0x64.sys
    .sys windows:6 windows x64 arch:x64

    d41fa95d4642dc981f10de36f4dc8cd7


    Code Sign

    Headers

    Imports

    Sections

  • testsh-x12/benchmark_10M.cmd
  • testsh-x12/benchmark_1M.cmd
  • testsh-x12/config.json
  • testsh-x12/pool_mine_example.cmd
  • testsh-x12/rtm_ghostrider_example.cmd
  • testsh-x12/solo_mine_example.cmd
  • testsh-x12/start.cmd
  • testsh-x12/xmrig.exe
    .exe windows:6 windows x64 arch:x64

    12806e48b853545b536463546db4baa1


    Headers

    Imports

    Sections