General

  • Target

    demoapp-test12.zip

  • Size

    2.6MB

  • MD5

    7b005dd37773697d403cc7847fc1843d

  • SHA1

    c8f060fc9dfe8d47730ac6c9eea4e3e3899c7ce0

  • SHA256

    1ac04b7f302569b630a001874320f7e2fd99ef04ee835446c83ab71059f1a10d

  • SHA512

    b37b18b16b83c569566da355cc67c46e806e54f6bb3906214546e5d8611f9a7e08de0951490bd0d59581bd5e1ddbb57a95c2dbd3138576610b8d30da526c591b

  • SSDEEP

    49152:aC/efKtVdB1jjJy/q+bs4hgh3ElDpXQWNJdi7qLOgth8XlbuJ8cSYn:WKdFy/qtlh3mRpNJddSEcNcSYn

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 2 IoCs
  • Xmrig family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • demoapp-test12.zip
    .zip
  • demoapp-test12/SHA256SUMS
  • demoapp-test12/WinRing0x64.sys
    .sys windows:6 windows x64 arch:x64

    d41fa95d4642dc981f10de36f4dc8cd7


    Code Sign

    Headers

    Imports

    Sections

  • demoapp-test12/benchmark_10M.cmd
  • demoapp-test12/benchmark_1M.cmd
  • demoapp-test12/config.json
  • demoapp-test12/pool_mine_example.cmd
  • demoapp-test12/rtm_ghostrider_example.cmd
  • demoapp-test12/solo_mine_example.cmd
  • demoapp-test12/start.cmd
  • demoapp-test12/xmrig.exe
    .exe windows:6 windows x64 arch:x64

    12806e48b853545b536463546db4baa1


    Headers

    Imports

    Sections