Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    anhgh-p18.zip

  • Size

    2.6MB

  • MD5

    ee5a2c41383547095633cc0445873d54

  • SHA1

    c956a867a7bf4b97fa5566c4d7b9a5cf0a622167

  • SHA256

    59779aec32cc8cbc8a07e3227235468f62fca8a1032318722d40ac570228e11f

  • SHA512

    b865118cf93a2d0cccfd775f45d070489d32d781c472ddd190070d807451daf30d0f31525f191e0403cbeda9a40ddbfa5b61685220eceab8820f0e272c90dbe7

  • SSDEEP

    49152:jC/efKtVdB1jjJy/q+bs4hgh3ElDpXQWNJdi7qLOgth8XlbuJ8cSYs:3KdFy/qtlh3mRpNJddSEcNcSYs

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 2 IoCs
  • Xmrig family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • anhgh-p18.zip
    .zip
  • anhgh-p18/SHA256SUMS
  • anhgh-p18/WinRing0x64.sys
    .sys windows:6 windows x64 arch:x64

    d41fa95d4642dc981f10de36f4dc8cd7


    Code Sign

    Headers

    Imports

    Sections

  • anhgh-p18/benchmark_10M.cmd
  • anhgh-p18/benchmark_1M.cmd
  • anhgh-p18/config.json
  • anhgh-p18/pool_mine_example.cmd
  • anhgh-p18/rtm_ghostrider_example.cmd
  • anhgh-p18/solo_mine_example.cmd
  • anhgh-p18/start.cmd
  • anhgh-p18/xmrig.exe
    .exe windows:6 windows x64 arch:x64

    12806e48b853545b536463546db4baa1


    Headers

    Imports

    Sections

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.