General

  • Target

    deficode-k9.zip

  • Size

    2.6MB

  • MD5

    b8173457384e3f71b33d42e535e89a52

  • SHA1

    a1c68fff7f89715a9e899487da05d49c33af3f17

  • SHA256

    65b4e0a5baa30db77b56c6a7f8ab97691584f1a95cb3622a041cf2711998da59

  • SHA512

    5ce018a72ef79fc32fa197eb55ae882c60b9497fcd58fa39cdef69fd162daafd87d740f18cc6d82c6fe2bad813a0193bf14c152ed2286a3d114386921e968c5a

  • SSDEEP

    49152:SC/efKtVdB1jjJy/q+bs4hgh3ElDpXQWNJdi7qLOgth8XlbuJ8cSYx:+KdFy/qtlh3mRpNJddSEcNcSYx

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 2 IoCs
  • Xmrig family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • deficode-k9.zip
    .zip
  • deficode-k9/SHA256SUMS
  • deficode-k9/WinRing0x64.sys
    .sys windows:6 windows x64 arch:x64

    d41fa95d4642dc981f10de36f4dc8cd7


    Code Sign

    Headers

    Imports

    Sections

  • deficode-k9/benchmark_10M.cmd
  • deficode-k9/benchmark_1M.cmd
  • deficode-k9/config.json
  • deficode-k9/pool_mine_example.cmd
  • deficode-k9/rtm_ghostrider_example.cmd
  • deficode-k9/solo_mine_example.cmd
  • deficode-k9/start.cmd
  • deficode-k9/xmrig.exe
    .exe windows:6 windows x64 arch:x64

    12806e48b853545b536463546db4baa1


    Headers

    Imports

    Sections

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.