General

  • Target

    cz-x6.zip

  • Size

    2.6MB

  • MD5

    8e182a3f9b176b3767f9bfe53fe2e711

  • SHA1

    4143c22ffdf807887bd696f324b588bd4d8975fb

  • SHA256

    08dc67ddc2fc41255326ec1b36b54c3ccd8532808fc55add49a7892c6a713945

  • SHA512

    72465324123ba59897631d0cbd955642ec4ecdbf9a5c241101359595cdf95996372c081c0c15aa0169326204d3bfbf88900443eb3479c2328ecfae6bcce5609d

  • SSDEEP

    49152:kC/efKtVdB1jjJy/q+bs4hgh3ElDpXQWNJdi7qLOgth8XlbuJ8cSYv:IKdFy/qtlh3mRpNJddSEcNcSYv

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 2 IoCs
  • Xmrig family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • cz-x6.zip
    .zip
  • cz-x6/SHA256SUMS
  • cz-x6/WinRing0x64.sys
    .sys windows:6 windows x64 arch:x64

    d41fa95d4642dc981f10de36f4dc8cd7


    Code Sign

    Headers

    Imports

    Sections

  • cz-x6/benchmark_10M.cmd
  • cz-x6/benchmark_1M.cmd
  • cz-x6/config.json
  • cz-x6/pool_mine_example.cmd
  • cz-x6/rtm_ghostrider_example.cmd
  • cz-x6/solo_mine_example.cmd
  • cz-x6/start.cmd
  • cz-x6/xmrig.exe
    .exe windows:6 windows x64 arch:x64

    12806e48b853545b536463546db4baa1


    Headers

    Imports

    Sections