General

  • Target

    PhoenixMiner_6.2c_Windows.zip

  • Size

    5.3MB

  • MD5

    c90c586712ba8196c3471db532c139b8

  • SHA1

    b62bb4774de51b97978bd389dd284e4d636ed950

  • SHA256

    e4606439b649d4635746c9a408e78492759398c12b952df2574ca871740002ad

  • SHA512

    08cf479aa03fc53d698b7ad703f9e09a5ccd57885cd6613526f9d0b7166bd4fddb380ad03be870cae61e9be41894c9cf7b1dd936fd99a1c4f68e01df6077553f

  • SSDEEP

    98304:5+WELtwI+x88/G6/bv2CK4Xo7/qnuu86CESMcgNfXTm9j7jXPjPgxm22YaVI:5+WDIgHO6/bvlkXuHylc7mpExm22YaI

Score
9/10

Malware Config

Signatures

  • Detectes Phoenix Miner Payload 1 IoCs
  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • PhoenixMiner_6.2c_Windows.zip
    .zip
  • PhoenixMiner_6.2c_Windows/10_ethereum-classic-crazypool.bat
  • PhoenixMiner_6.2c_Windows/11_ethereum-classic-hashcity.bat
  • PhoenixMiner_6.2c_Windows/12_ethereum-classic-nicehash.bat
  • PhoenixMiner_6.2c_Windows/13_ethereum-classic-poolin.bat
  • PhoenixMiner_6.2c_Windows/1_Ethereum-classic-f2pool.bat
  • PhoenixMiner_6.2c_Windows/1_ethereum-classic-nanopool.bat
  • PhoenixMiner_6.2c_Windows/3_ethereum-classic-miningpoolhub.bat
  • PhoenixMiner_6.2c_Windows/42_ethw-ethwmine.bat
  • PhoenixMiner_6.2c_Windows/42_ethw-pool-msk.bat
  • PhoenixMiner_6.2c_Windows/4_ethereum-classic-ethermine.bat
  • PhoenixMiner_6.2c_Windows/5_Ethereum-classic-antpool.bat
  • PhoenixMiner_6.2c_Windows/6_Ethereum-classic-hiveon.bat
  • PhoenixMiner_6.2c_Windows/7_ethereum-classic-coinmine.bat
  • PhoenixMiner_6.2c_Windows/8_ethereum-classic-beepool.bat
  • PhoenixMiner_6.2c_Windows/9_ethereum-classic-emcd.bat
  • PhoenixMiner_6.2c_Windows/Akroma-zergpool.bat
  • PhoenixMiner_6.2c_Windows/Calisto-2miners.bat
  • PhoenixMiner_6.2c_Windows/EIO.dll
    .dll windows:4 windows x86 arch:x86

    8145cd01e550760040901ee71e5229a4


    Headers

    Imports

    Exports

    Sections

  • PhoenixMiner_6.2c_Windows/EIO.exe
    .exe windows:6 windows x86 arch:x86

    1a52965b4f1644b901f5ce2019d4130c


    Headers

    Imports

    Sections

  • PhoenixMiner_6.2c_Windows/EtherGem - digipools.bat
  • PhoenixMiner_6.2c_Windows/Ethereum Social-gonsmine.bat
  • PhoenixMiner_6.2c_Windows/Ethereum Social-miningpoolhub.bat
  • PhoenixMiner_6.2c_Windows/Expanse-miningpoolhub.bat
  • PhoenixMiner_6.2c_Windows/IOMap64.sys
    .sys windows:6 windows x64 arch:x64

    4463e084dfd14f74158c0725d8f13b78


    Code Sign

    Headers

    Imports

    Sections

  • PhoenixMiner_6.2c_Windows/Metaverse-cryptopoolpond.bat
  • PhoenixMiner_6.2c_Windows/Metaverse-topmining.bat
  • PhoenixMiner_6.2c_Windows/Nicehash.bat
  • PhoenixMiner_6.2c_Windows/PhoenixMiner.exe
    .exe windows:6 windows x64 arch:x64

    a8eb81b09f2018eee064158a9f3242cb


    Headers

    Imports

    Exports

    Sections

  • PhoenixMiner_6.2c_Windows/QuarkChain-ontopool.bat
  • PhoenixMiner_6.2c_Windows/Readme.txt
  • PhoenixMiner_6.2c_Windows/ReleaseNotes.txt
  • PhoenixMiner_6.2c_Windows/UBQ-Ubiqpool.io.bat
  • PhoenixMiner_6.2c_Windows/config.txt
  • PhoenixMiner_6.2c_Windows/doc/API.html
    .js
  • PhoenixMiner_6.2c_Windows/doc/_static/basic.css
  • PhoenixMiner_6.2c_Windows/doc/_static/css/badge_only.css
  • PhoenixMiner_6.2c_Windows/doc/_static/css/theme.css
  • PhoenixMiner_6.2c_Windows/doc/_static/doctools.js
    .js
  • PhoenixMiner_6.2c_Windows/doc/_static/documentation_options.js
    .js
  • PhoenixMiner_6.2c_Windows/doc/_static/file.png
    .png
  • PhoenixMiner_6.2c_Windows/doc/_static/fonts/fontawesome-webfont.ttf
  • PhoenixMiner_6.2c_Windows/doc/_static/jquery-3.4.1.js
    .js
  • PhoenixMiner_6.2c_Windows/doc/_static/jquery.js
    .js
  • PhoenixMiner_6.2c_Windows/doc/_static/js/modernizr.min.js
    .js
  • PhoenixMiner_6.2c_Windows/doc/_static/js/theme.js
    .js
  • PhoenixMiner_6.2c_Windows/doc/_static/language_data.js
    .js
  • PhoenixMiner_6.2c_Windows/doc/_static/minus.png
    .png
  • PhoenixMiner_6.2c_Windows/doc/_static/plus.png
    .png
  • PhoenixMiner_6.2c_Windows/doc/_static/pygments.css
  • PhoenixMiner_6.2c_Windows/doc/_static/searchtools.js
    .js
  • PhoenixMiner_6.2c_Windows/doc/_static/underscore-1.3.1.js
    .js
  • PhoenixMiner_6.2c_Windows/doc/_static/underscore.js
    .js
  • PhoenixMiner_6.2c_Windows/doc/arguments.html
    .js
  • PhoenixMiner_6.2c_Windows/doc/config-files.html
    .js
  • PhoenixMiner_6.2c_Windows/doc/faq.html
    .js
  • PhoenixMiner_6.2c_Windows/doc/features.html
    .js
  • PhoenixMiner_6.2c_Windows/doc/genindex.html
    .js
  • PhoenixMiner_6.2c_Windows/doc/hw-control.html
    .js
  • PhoenixMiner_6.2c_Windows/doc/index.html
    .js
  • PhoenixMiner_6.2c_Windows/doc/interactive.html
    .js
  • PhoenixMiner_6.2c_Windows/doc/intro.html
    .js
  • PhoenixMiner_6.2c_Windows/doc/quick-start.html
    .js
  • PhoenixMiner_6.2c_Windows/doc/remote.html
    .js
  • PhoenixMiner_6.2c_Windows/doc/search.html
    .js
  • PhoenixMiner_6.2c_Windows/doc/searchindex.js
  • PhoenixMiner_6.2c_Windows/doc/troubleshooting.html
    .js
  • PhoenixMiner_6.2c_Windows/dpools.txt
  • PhoenixMiner_6.2c_Windows/dual-ethereum-classic-blake2s-nicehash.bat
  • PhoenixMiner_6.2c_Windows/epools.txt
  • PhoenixMiner_6.2c_Windows/help.bat
  • PhoenixMiner_6.2c_Windows/reboot.bat
  • PhoenixMiner_6.2c_Windows/start_miner.bat
  • PhoenixMiner_6.2c_Windows/start_miner_etc.bat