General

  • Target

    cz-x14.zip

  • Size

    2.6MB

  • MD5

    a004557e5fc36e85b3fa3324cef3e37d

  • SHA1

    308d2b38747f2dea0c425f4b8f456718be73b804

  • SHA256

    ddaf75a6f5cbf67e4de154dd75d8ee874aab4fb109c8bd31f33e927e627f6e68

  • SHA512

    b49c9cf3c6518eef98745ca6bc7475b6d12c8a3c59f1b605b48d3ec8cdfd6d2bc3416966d838feb19cb8825d0cf32f889c912716159ccf06ca8a7b7cc12ebfc8

  • SSDEEP

    49152:SC/efKtVdB1jjJy/q+bs4hgh3ElDpXQWNJdi7qLOgth8XlbuJ8cSYQ:+KdFy/qtlh3mRpNJddSEcNcSYQ

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 2 IoCs
  • Xmrig family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • cz-x14.zip
    .zip
  • cz-x14/SHA256SUMS
  • cz-x14/WinRing0x64.sys
    .sys windows:6 windows x64 arch:x64

    d41fa95d4642dc981f10de36f4dc8cd7


    Code Sign

    Headers

    Imports

    Sections

  • cz-x14/benchmark_10M.cmd
  • cz-x14/benchmark_1M.cmd
  • cz-x14/config.json
  • cz-x14/pool_mine_example.cmd
  • cz-x14/rtm_ghostrider_example.cmd
  • cz-x14/solo_mine_example.cmd
  • cz-x14/start.cmd
  • cz-x14/xmrig.exe
    .exe windows:6 windows x64 arch:x64

    12806e48b853545b536463546db4baa1


    Headers

    Imports

    Sections