General

  • Target

    anhgh-p17.zip

  • Size

    2.6MB

  • MD5

    4877d228c2595551ec25e546e0fea474

  • SHA1

    f789e7dda583ecadd60b8f656b18d6607edd2a09

  • SHA256

    2bcdadb663c882ca510e858f20f995d782c6660f9738d303bcbffe0b02114b08

  • SHA512

    d875d5425d05e372ff8b8fe56581a51023256999f4b386baa48abb8301a721ab8b109791217a435a1287d2fe1c064e60c9eb5a49e911371bc3e7f865c0405e8c

  • SSDEEP

    49152:cC/efKtVdB1jjJy/q+bs4hgh3ElDpXQWNJdi7qLOgth8XlbuJ8cSYZ:QKdFy/qtlh3mRpNJddSEcNcSYZ

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 2 IoCs
  • Xmrig family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • anhgh-p17.zip
    .zip
  • anhgh-p17/SHA256SUMS
  • anhgh-p17/WinRing0x64.sys
    .sys windows:6 windows x64 arch:x64

    d41fa95d4642dc981f10de36f4dc8cd7


    Code Sign

    Headers

    Imports

    Sections

  • anhgh-p17/benchmark_10M.cmd
  • anhgh-p17/benchmark_1M.cmd
  • anhgh-p17/config.json
  • anhgh-p17/pool_mine_example.cmd
  • anhgh-p17/rtm_ghostrider_example.cmd
  • anhgh-p17/solo_mine_example.cmd
  • anhgh-p17/start.cmd
  • anhgh-p17/xmrig.exe
    .exe windows:6 windows x64 arch:x64

    12806e48b853545b536463546db4baa1


    Headers

    Imports

    Sections

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.