General

  • Target

    testsh-x13.zip

  • Size

    2.6MB

  • MD5

    3d0aef392a139bd11e4b62da259abbc7

  • SHA1

    12198d70d28fdb896e5745addbfbde2a42e3ac07

  • SHA256

    d338107d3833c942fbae671c7c65c037f388fdcc2ce2b517792d4ad890d11ecd

  • SHA512

    478d7ed82f3e76c11ea455996d90857a2cc2e724338f1e89963fed4425a69f7baf6644dc8b606fc0ddc042c7ec8fc3b70eb47608bb740d534495cc9f2b4add61

  • SSDEEP

    49152:RC/efKtVdB1jjJy/q+bs4hgh3ElDpXQWNJdi7qLOgth8XlbuJ8cSYI:FKdFy/qtlh3mRpNJddSEcNcSYI

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 2 IoCs
  • Xmrig family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • testsh-x13.zip
    .zip
  • testsh-x13/SHA256SUMS
  • testsh-x13/WinRing0x64.sys
    .sys windows:6 windows x64 arch:x64

    d41fa95d4642dc981f10de36f4dc8cd7


    Code Sign

    Headers

    Imports

    Sections

  • testsh-x13/benchmark_10M.cmd
  • testsh-x13/benchmark_1M.cmd
  • testsh-x13/config.json
  • testsh-x13/pool_mine_example.cmd
  • testsh-x13/rtm_ghostrider_example.cmd
  • testsh-x13/solo_mine_example.cmd
  • testsh-x13/start.cmd
  • testsh-x13/xmrig.exe
    .exe windows:6 windows x64 arch:x64

    12806e48b853545b536463546db4baa1


    Headers

    Imports

    Sections