t-rex-0.26.8-win.zip
- SHA256 207bfa95050e2ac1f16ceecd5891b93eda7bada2730b4e7172283d72f5ad2309
Overview
overview
5Static
static
3ALPH-herominers.bat
windows11-21h2-x64
5ALPH-woolypooly.bat
windows11-21h2-x64
5CFX-nanopool.bat
windows11-21h2-x64
5CFX-woolypooly.bat
windows11-21h2-x64
5ERGO-2miners.bat
windows11-21h2-x64
5ERGO-herominers.bat
windows11-21h2-x64
5ERGO-nanopool.bat
windows11-21h2-x64
5ERGO-woolypooly.bat
windows11-21h2-x64
5ETC+ALPH.bat
windows11-21h2-x64
5ETC+ZIL-ezil.bat
windows11-21h2-x64
5ETC-2miners.bat
windows11-21h2-x64
5ETC-ISP-hi...de.bat
windows11-21h2-x64
5ETC-woolypooly.bat
windows11-21h2-x64
5ETHW+ALPH.bat
windows11-21h2-x64
5ETHW+ZIL-ezil.bat
windows11-21h2-x64
5ETHW-ethproxy.bat
windows11-21h2-x64
5FIRO-2miners.bat
windows11-21h2-x64
5FIRO-mintpond.bat
windows11-21h2-x64
5FIRO-woolypooly.bat
windows11-21h2-x64
5RVN-2miners.bat
windows11-21h2-x64
5RVN-ravenminer.bat
windows11-21h2-x64
5RVN-woolypooly.bat
windows11-21h2-x64
5SERO-serocash.bat
windows11-21h2-x64
5VBK-reb0rn.bat
windows11-21h2-x64
5VEIL-woolypooly.bat
windows11-21h2-x64
5ZANO-luckypool.bat
windows11-21h2-x64
5help/FAQ.bat
windows11-21h2-x64
3t-rex.exe
windows11-21h2-x64
5Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ALPH-herominers.bat
Resource
win11-20260513-en
windows11-21h2-x64
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
ALPH-woolypooly.bat
Resource
win11-20260513-en
windows11-21h2-x64
4 signatures
150 seconds
Behavioral task
behavioral3
Sample
CFX-nanopool.bat
Resource
win11-20260513-en
windows11-21h2-x64
4 signatures
150 seconds
Behavioral task
behavioral4
Sample
CFX-woolypooly.bat
Resource
win11-20260513-en
windows11-21h2-x64
4 signatures
150 seconds
Behavioral task
behavioral5
Sample
ERGO-2miners.bat
Resource
win11-20260513-en
windows11-21h2-x64
4 signatures
150 seconds
Behavioral task
behavioral6
Sample
ERGO-herominers.bat
Resource
win11-20260513-en
windows11-21h2-x64
4 signatures
150 seconds
Behavioral task
behavioral7
Sample
ERGO-nanopool.bat
Resource
win11-20260513-en
windows11-21h2-x64
4 signatures
150 seconds
Behavioral task
behavioral8
Sample
ERGO-woolypooly.bat
Resource
win11-20260513-en
windows11-21h2-x64
4 signatures
150 seconds
Behavioral task
behavioral9
Sample
ETC+ALPH.bat
Resource
win11-20260513-en
windows11-21h2-x64
4 signatures
150 seconds
Behavioral task
behavioral10
Sample
ETC+ZIL-ezil.bat
Resource
win11-20260513-en
windows11-21h2-x64
4 signatures
150 seconds
Behavioral task
behavioral11
Sample
ETC-2miners.bat
Resource
win11-20260513-en
windows11-21h2-x64
4 signatures
150 seconds
Behavioral task
behavioral12
Sample
ETC-ISP-hidden-mode.bat
Resource
win11-20260513-en
windows11-21h2-x64
4 signatures
150 seconds
Behavioral task
behavioral13
Sample
ETC-woolypooly.bat
Resource
win11-20260513-en
windows11-21h2-x64
4 signatures
150 seconds
Behavioral task
behavioral14
Sample
ETHW+ALPH.bat
Resource
win11-20260513-en
windows11-21h2-x64
4 signatures
150 seconds
Behavioral task
behavioral15
Sample
ETHW+ZIL-ezil.bat
Resource
win11-20260513-en
windows11-21h2-x64
4 signatures
150 seconds
Behavioral task
behavioral16
Sample
ETHW-ethproxy.bat
Resource
win11-20260513-en
windows11-21h2-x64
4 signatures
150 seconds
Behavioral task
behavioral17
Sample
FIRO-2miners.bat
Resource
win11-20260513-en
windows11-21h2-x64
4 signatures
150 seconds
Behavioral task
behavioral18
Sample
FIRO-mintpond.bat
Resource
win11-20260513-en
windows11-21h2-x64
4 signatures
150 seconds
Behavioral task
behavioral19
Sample
FIRO-woolypooly.bat
Resource
win11-20260513-en
windows11-21h2-x64
4 signatures
150 seconds
Behavioral task
behavioral20
Sample
RVN-2miners.bat
Resource
win11-20260513-en
windows11-21h2-x64
4 signatures
150 seconds
Behavioral task
behavioral21
Sample
RVN-ravenminer.bat
Resource
win11-20260513-en
windows11-21h2-x64
4 signatures
150 seconds
Behavioral task
behavioral22
Sample
RVN-woolypooly.bat
Resource
win11-20260513-en
windows11-21h2-x64
4 signatures
150 seconds
Behavioral task
behavioral23
Sample
SERO-serocash.bat
Resource
win11-20260513-en
windows11-21h2-x64
4 signatures
150 seconds
Behavioral task
behavioral24
Sample
VBK-reb0rn.bat
Resource
win11-20260513-en
windows11-21h2-x64
4 signatures
150 seconds
Behavioral task
behavioral25
Sample
VEIL-woolypooly.bat
Resource
win11-20260513-en
windows11-21h2-x64
4 signatures
150 seconds
Behavioral task
behavioral26
Sample
ZANO-luckypool.bat
Resource
win11-20260513-en
windows11-21h2-x64
4 signatures
150 seconds
Behavioral task
behavioral27
Sample
help/FAQ.bat
Resource
win11-20260513-en
windows11-21h2-x64
1 signatures
150 seconds
Behavioral task
behavioral28
Sample
t-rex.exe
Resource
win11-20260513-en
windows11-21h2-x64
2 signatures
150 seconds
General
- Target t-rex-0.26.8-win.zip
- Size 38.4MB
- Sample260722-1xp75acf53
- SHA256 207bfa95050e2ac1f16ceecd5891b93eda7bada2730b4e7172283d72f5ad2309
- MD5 48fc408e5c758aabba5b25bab9efd567
- SHA1 cda73245b633eab32823bfa02e3a161457491a06
- SHA512 0ebee55325ce2e2d4fcd9e3de7061816bed5a575a3ca39cbaa0848104a051b559d9ffebfe778ce83c5f0ff88a5593772073e5f758487c0ca6b3b495640d2ad62
- SSDEEP 786432:dzdyHYyWqJNk2uDHf1Q+qBS7q0+JYugACoMr7S+Z168C/dnqDL2Jtc2H:dJyH+q0BLK+coq0+eUga+q8CVnqPs3
- TLSH T1B397136A62A802ECD07BC07CD917A903E7B1741B03B09BDF26D999A61F576F05E3E710
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/t-rex.exe
File Explorer
-
t-rex-0.26.8-win.zip.zip 38.4MB
-
ALPH-herominers.bat154B
-
ALPH-woolypooly.bat147B
-
CFX-nanopool.bat164B
-
CFX-woolypooly.bat147B
-
ERGO-2miners.bat151B
-
ERGO-herominers.bat158B
-
ERGO-nanopool.bat173B
-
ERGO-woolypooly.bat155B
-
ETC+ALPH.bat277B
-
ETC+ZIL-ezil.bat308B
-
ETC-2miners.bat142B
-
ETC-ISP-hidden-mode.bat184B
-
ETC-woolypooly.bat147B
-
ETHW+ALPH.bat277B
-
ETHW+ZIL-ezil.bat302B
-
ETHW-ethproxy.bat77B
-
FIRO-2miners.bat132B
-
FIRO-mintpond.bat133B
-
FIRO-woolypooly.bat135B
-
README.md29KB
-
RVN-2miners.bat129B
-
RVN-ravenminer.bat136B
-
RVN-woolypooly.bat134B
-
SERO-serocash.bat243B
-
VBK-reb0rn.bat144B
-
VEIL-woolypooly.bat151B
-
ZANO-luckypool.bat211B
-
config_example10KB
-
help/API.md9KB
-
help/Dual mining.md4KB
-
help/FAQ.md.bat 27KB
-
help/LHR.md6KB
-
help/WebUI.md3KB
-
t-rex.exe.exe 38.3MB
ALPH-herominers.bat
- SHA256 025602585fec10119c8ee115715ee6d86e34ce7c5cc3dd7e3930efdc2027cd1a
- MD5 59d222706ddfb61388df64cb198e67d7
- SHA1 a45166df41d31c54ba8851342aa8f9e7714f227a
- SHA512 c0f99434fbc596120e4f4e858f172da28f134e6a39b7c3ad1c0129b71840084120768a03922f72c4020ecea3afc883919c3f9dabc372b33e47825e1b3b885521
- TLSH T179C08CBA8B68023AB5D54504A89A2D8CEA0C4A82E62B0910BD292275F48A49C6F140CA
- MD5 SHA1 SHA512 TLSH
ALPH-woolypooly.bat
- SHA256 52038c702029d2a9274c2013ab30ba0f5579927d2f5925e2f3b8b9626c891d92
- MD5 9f675d5f29e26eb8680c96916acbb9c5
- SHA1 127f681651e62c797d44972f19a9d7080e25e172
- SHA512 b33ac1db3e551f9257a30cdf8381e939547f3edfe4507458af1b85dde78d9b6acea79e5bae94df9300cefd43f76011f642cf90528601f034cb4a47153957b562
- TLSH T178C02BBF8B7400B6B5C4414480255C0DFE0C87C1D57B1A21BA1C2374F89F05D4F140C2
- MD5 SHA1 SHA512 TLSH
CFX-nanopool.bat
- SHA256 61df4f4bd7d4ea06142382777139ab88673a37f39b339f5344ae8ff4b0615ebf
- MD5 0f44d2da16070ff57bd726a9e33efa1b
- SHA1 52280ed9921b61912810fe0c268b0468b5149d6e
- SHA512 a962e0ec36893839017ec891356689b05db3bd0d9fd13ea1b071a03457630ec969fdef790360b99cfe782683f7e5f27f79ee61124f95f239c154621cbe50ea4e
- TLSH T14CC0C03C85D43C30C0930940237C601DCD58B080C4300558704D88FF381B4282120ED5
- MD5 SHA1 SHA512 TLSH
CFX-woolypooly.bat
- SHA256 0cdd23a0ead1ac9c4c944a813264e0f0f86d8198803b5b27656d67364f39b753
- MD5 42f42b3da60222e95a7fac0155a99bd6
- SHA1 e2f43df4e34e1f08e7658c63d7253322e9c70c68
- SHA512 c3731d3c656395232a1f18c7e1fdffc20fee352a5deaeb8355796409ea69fb62643d6b9fce78a9eee1a5b75a0bd9432ed54ea57ba1683a4a2af2b438a16b2a3b
- TLSH T1F1C08C3695E51830258019C541782A9EDC98B5D0C42186EAB54C46A63A0F869A2309C6
- MD5 SHA1 SHA512 TLSH
ERGO-2miners.bat
- SHA256 6f432163d91d83695f58b03b4d8a681a952de2c840062bd94d632353b969e44f
- MD5 6e06e5f220bd5a56bf63b75b4c64047f
- SHA1 37a688c3e1570ff7e69192840f63a15cdacca47f
- SHA512 ead3d5d2bb0dc2dbd785ba42aa7669d4824e3e477a5d1597f84e1dd7562938736f7370cc102e5f3b0855a67ec53042aa7b3cd43f89395375419c4c42281cc8d2
- TLSH T1EBC08C9B8B7A0279BBC1048A4936B00ECC495042D619494037690308AA1B69856602DA
- MD5 SHA1 SHA512 TLSH
ERGO-herominers.bat
- SHA256 6b08f31cbe90d19b68249e41a79a7a8e7e0fd27c8f7cc8f217ab8fb6068e6acc
- MD5 194f3627144b5d93662635f68e428dae
- SHA1 af6234cdafa190e0d7d9b77ada1ef2eec1234d6d
- SHA512 67e3262fac39ae810e11d7e9557182f477e23e8c1c79583503dd39644f38b3a65ce8546d62562e70343ee7e0f5b0cfb4e613d79c96041c546d9487c5f3ca4bf5
- TLSH T1D7C08C8B8F3A037ABBC1488A5936B00ECC8E1041D6298D10366D1318BA1B9DDA3A40CE
- MD5 SHA1 SHA512 TLSH
ERGO-nanopool.bat
- SHA256 cb5c18094f11a04ad69f2d565f2d29c18b67259225c95b8cdfa46564912eb217
- MD5 968c2e55027eeeb7f0e0e67872ef7a5f
- SHA1 9e4a5287ce3814b3a09577eed68cfe52051e75c5
- SHA512 d40f9d372d2cc7c0e907dd90e5d7f34f0aacf367f52337c27c3ccbbfa8a0cd60b981a1b9ddeb29d29e61a5a6605d02c1dcfd27c51eead3ad259a2d8704142748
- TLSH T12DC0C0BA8E6824B06BC004661735E00ECD460040C224091432CF821D443B04843101CD
- MD5 SHA1 SHA512 TLSH
ERGO-woolypooly.bat
- SHA256 a0933d17c5e939be79b5b38e9b98a9b4b1a64cac186205fa5c9c9a9528051fea
- MD5 0e7eeedcf2dcd2763521269986d31e82
- SHA1 c6dbde1394ed4ea0da6eea01894d8d5b53a4e1e9
- SHA512 50c184190ab1cec364810b00307340881b91240d235902485018db80c71771ee99a719c83999db7272962e981f8657c45dc6acede1160d679766262feb779e05
- TLSH T1DAC08C5B9B3901B47BC0048A8536A90ACC8A5180E1595AA633591308AA2F19943A00CE
- MD5 SHA1 SHA512 TLSH
ETC+ALPH.bat
- SHA256 c562f42bbb7db6bbeef806e668d0ae8a19634c9887a73314889547c4b1e19bf1
- MD5 ee6547a93a2e68fb3754f3d3f5de7b8f
- SHA1 6fa75502d75e7f766f4981acb57d861a4b8f82a1
- SHA512 2a3ff6109e1b65b5064491ca135ab51b5d7135ebf7dfdc57a053ff5acb59ba98b0157c90afc59fbb53b10d67a9988e9c290d1a693fc9654b7e5e9d2b3882addc
- TLSH T12AD02B5EDF74177AF4DD0904B59B3C0CC90C1546F66A8E045D3C4725F5050ECAD340CA
- MD5 SHA1 SHA512 TLSH
ETC+ZIL-ezil.bat
- SHA256 72cf891570d14961f7ccf5d3b05aa500a34141cba191cf5b8fad2753d7eb2da3
- MD5 c11670ad128dcabf31433e690132942f
- SHA1 47a3118224750fe077d52b9c881f3a78840a39a4
- SHA512 0ad0c62b700a8f5b83707b60b1488d4aff98b3ff8401b6ea9c64fd04b69512d1ce6c064da726480409a03bbe0dc2214b14f48cc4289af5621ae29b726352d3ac
- TLSH T13DE07D4EDA2706B0E01D5D8537A2540DC9991103A928FE1EB85C4503E209018D5748DA
- MD5 SHA1 SHA512 TLSH
ETC-2miners.bat
- SHA256 74b0898a3960434ee46bdfd6d4657924a43be7386424889bb4ce7db908ade3b0
- MD5 297b19c511712ae647cd045f808a7f51
- SHA1 b2d744ce70ec00d63e4cf16dac80f41b7e5fc348
- SHA512 6e29a8b33e050883b4b34b869f25ab897bf3b8b141da4bf5ed01924afb05bfe1a04c6bc3ad71a51e7b4ba3ed27e690491c7d6237eb0d74de06f17f50da81d29f
- TLSH T1DFC02B5EDE352575E05E094572233C0CC84D1002E0395B012D2C0519F9044DCDA344C9
- MD5 SHA1 SHA512 TLSH
ETC-ISP-hidden-mode.bat
- SHA256 3e14e2dc6a55f9e872ddb19f4458bafce8f209caa693e10f1481328d6c578a07
- MD5 644d1d193db37cf645e26baf8e10a9f5
- SHA1 ea1d82215cdff3cd1b9c25c40906ea6ec0da319b
- SHA512 02dcdd26058cd338b6cb03a94cbab7583b0cbb9a4c1ca89d9abc680dc7e952c0a0662f50f1cbcf46cbe0a29740baa6304972f5ab3a7aba4f513fb8fc21115164
- TLSH T118C0C0AFCF1985BDE04D09C636713C0CCC1D0002E1303D013EAC4A0EB40506CD930481
- MD5 SHA1 SHA512 TLSH
ETC-woolypooly.bat
- SHA256 c1179f13962393f31f13d4e1995d36dc7815e0d2293c46da6b944d0fc24417a3
- MD5 871bac3f910667de91deb7cebd1fa2fe
- SHA1 3a632647b35c96e74633bd08e411d3d05a97a8f7
- SHA512 ece4568d19070dad507f703782ac6b702a5d48ebc098d05e23a5d50b468f7386fad3470a04aac12beee1bdd73d0f70408c7bcd47a4d8155e4551932daf75ca51
- TLSH T1D2C02B2FDA3514F0F0480AC8A2326C0CCC8E5141F0366B672A1C0925F40D09DDB344CA
- MD5 SHA1 SHA512 TLSH
ETHW+ALPH.bat
- SHA256 394c5d5b4b61aff9f54145b728782a7009cefb03b83fc765988dc37cd5802f6a
- MD5 a551bd69b67f86d9385726fb914a6cd3
- SHA1 282fcbf71fae40d10bf8ebc4f1767fef1ab96885
- SHA512 a76c08b3a2616846ef65d76decf4c6e417a57a29365f1ad024a2c31d3c31ac9ae85542367a5649d53afc58ceaf50e022fd89ba9eaa7beb3d5e9165053013f271
- TLSH T1E3D02BAACFBC073AB5CD5604B4492D0DDA1C1745E67F48506F7D8B21E01A4DC2D244E5
- MD5 SHA1 SHA512 TLSH
ETHW+ZIL-ezil.bat
- SHA256 e030d9629b4ede1b1cea8d19ac26958d5bbc68ac5bb6f7bece8f0b7c7f6505ab
- MD5 058c40dff0c8cf81d03a8d2c743a06fb
- SHA1 2c16408fb7997ab48cd93b03ba57d1eb484e49a1
- SHA512 02f85e7b5f37e52614fe8769364d30a67a1218d8becff3ff4aa1c23000f89ab7e21b2544db9d346bd366e60de6bc8e1fa0baef2e10aed7db7d9a0b6770a6c9df
- TLSH T1C0E07DE98AAE0235E00E5645785041169B7C0707967D50E8BB1D891281294001574CF4
- MD5 SHA1 SHA512 TLSH
ETHW-ethproxy.bat
- SHA256 ca5f8b2b53eb90262156507e13d49dd3b22f47ccffb8b7cd427c1d28a8cf6d81
- MD5 2d979cfc95c6a20e03b679240d0a761d
- SHA1 56b4e450a1584df0a6df666e1df6bb0e59923a13
- SHA512 b1c6fb5dc0d8034b7174bbbd2600506379ccbb9ea35dfc432ec090243a64f4d52f38ad152f4c764b5a3029d571bd65c924fff46f9a8f06f15853b32b3cd6cac7
- TLSH T168A0245C073D0054C31F4D0C3031705DCC0DD000F0550400350D15141C15C041F340C1
- MD5 SHA1 SHA512 TLSH
FIRO-2miners.bat
- SHA256 f1c8c7bb0a9264410f3e13aa37f414834e246e1edc67813a348ec51375909981
- MD5 ab9a8db5bab6110f594d4cbbe7b5dbce
- SHA1 a6f3f5f1632249177457f30eb09452521b7e0755
- SHA512 f84b97a3a5cb8a8b14299aebb96a23dcadbe0fc93db5063a9410649cc04f19e9396097df961cf8bdae5186424a32ea710f7b85bc9440103b9864d2d1337c9ff8
- TLSH T1A3C02B3A07380E38A0A0190C2436344CCC0C148BD63609A076CC520CFC1644C71E04CC
- MD5 SHA1 SHA512 TLSH
FIRO-mintpond.bat
- SHA256 9249b57a57638e3f6fcba7b911400b8b714b06ee86763d8791a0f39faa25505e
- MD5 524f4eec99dd37fd721ef8f6405c1005
- SHA1 1b45a12f317ef6cc3f264a69f29a74676a4cba22
- SHA512 e80851f3d6524ae895fc0474eecb6d3f2a8c09b4dd08441a569347c9259e41fbed64b438fa25d067be013182b24836a095fe022bcd33b6460c7987745deb4131
- TLSH T10CC02B2907B84834644C09080039544CCC1D659BD1B90870614C5248FD3E80CF5A04CC
- MD5 SHA1 SHA512 TLSH
FIRO-woolypooly.bat
- SHA256 82c56e0f019d3131c6e800fad4db24f384982fb07896f026b723d304655e83f2
- MD5 5e1739d84353e352a2b43ac2c40f521b
- SHA1 b04adb2f122f2337a74316693c13afb247dc1fb4
- SHA512 91090d0c24af2df36fcd1b5675ab6861792b518388a8d7f4245ba2293404a1034e0bd4aab9257aed4fe93a059bfc533894ec9a15667d29016451ae68083f2ae7
- TLSH T1A9C02B1B037C48B47080094C80345C4DCC0E55C9E67116B2734C5144FC2F00D72A08CC
- MD5 SHA1 SHA512 TLSH
README.md
- SHA256 5da62eca021cfac513bffa8ec1fdd71b00b0ecbce7b5c115375d89ce228a6fe9
- MD5 7acd2960f033e0e39d26802fc5fa2154
- SHA1 c98ecef7ce3a71799d8bb808f2299fa716d3bd7b
- SHA512 fd6882f70c365a2fb79db48bd5ec9b0c016272e9947bea5c19c3a7e20f139b2ba96140843e396ad0ca2df625d7da1d3a47729c46d99cc5f3a5348c221c174886
- SSDEEP 768:Qitgs3T7DBPYgUEhixthhkHgkBkYszbMx/a6i4wDgLe5OTrzAF6q:Ves3/zY40OLe5ObZq
- TLSH T1B5D208226F40133946B4C6C3F5DA7742EB2904AF9B3A752435DE82187F3E096827DAD9
- MD5 SHA1 SHA512 SSDEEP TLSH
RVN-2miners.bat
- SHA256 74f022dd11b333b7561bf7e0e83b896308d360561f5b6f1efe3ba37ba86b7d2c
- MD5 50fe4021d80c450267d7534a9ab108e3
- SHA1 489d2221c9d63ae2e31ab24386f395f651c87aab
- SHA512 96a0081e901ab59bce9903d64d90a6e1c91fca6f9b99ac00094287faa1ced4619ff0a191e0e7892832695cc7b88dd51d39f6591b7a953ce1c797f65e8af3619d
- TLSH T1C9B02B2E29302334A1634E043430788C980E7429D122840CA29CA8A8381840EB1080C8
- MD5 SHA1 SHA512 TLSH
RVN-ravenminer.bat
- SHA256 e7907b17cb799f31e6b24606f1c73fcb346504c027c65dd8be09bab740907aa1
- MD5 2e61d95e696a404b501ee30dfc0a9309
- SHA1 af3f3259bf6ee89c84a164565ce1c4e0a3bfb6ca
- SHA512 d96f8206c6549dc733d6e146b4a0cb2adb7cab768534b71966cd8fc2299d31a76166b32dc2fba8bd3f7460b275e19d8381a90f49730d88b7fbc6acfe9741d467
- TLSH T16BC02B3E3A31137060084F0864309C4CDC0F79A9D126802CB38CC839141408572645CC
- MD5 SHA1 SHA512 TLSH
RVN-woolypooly.bat
- SHA256 1a6c815acb5018ce48151405c12b04350114da0cef0a6a7aca071c30857eda41
- MD5 1f71377da201f9d5b449c568185c8d27
- SHA1 1909dde994df8f10e27098cb8b4da86c73f4c9fa
- SHA512 30e0e448da5f81048cffa6a853e8fec7bc0a25d80b79b69917a5b958bf08c3c876c2db409b2b774fe3e6092f54acef0dc2f31f4a43ae2f9f7b77d7133d91a918
- TLSH T142C02B3F613052F0B0114E8860307C4CFC0FB0B8E112812DEA9C8C28242D00A72084C8
- MD5 SHA1 SHA512 TLSH
SERO-serocash.bat
- SHA256 46b1ae16c968835e9a11199c4b0c198cabf1b3b38710faf2ec366072f310a946
- MD5 862a47163ef1ae825fc7b9ff9ca4d9e8
- SHA1 c366eba8db79de0cb6aff098131ab66873e24956
- SHA512 29198cc69d64a43cc20c405b8753b219b75bf056322831eadd162a9b4f8fcf6baa0c9abef29b3e0a4fe789af138c068e96746177f2463022afafd36e8aeb47ef
- TLSH T163D095FD46565531109C4824A5787C9DDD04E443D74120721E17217534DD5AC4110680
- MD5 SHA1 SHA512 TLSH
VBK-reb0rn.bat
- SHA256 590867302929076c048deb326b9797d7332b2705299d0ea8b5d8b4767f8c736b
- MD5 58c139df84d21c1b1296d3efae4abc8b
- SHA1 415c7d9f3738d84aaaf4605e4022a73079816f32
- SHA512 b0974884c72bf85cb9c2a6f8e255a2c59c6723adc8eb3dc6e80ca6a532ed5b526012f7979c05e9645eab6805ed05de9811129f8076d2bf5ce678670321970c78
- TLSH T14EC02BCE292BF07CC0822C40803DA80DCE4C348CC3222681BE0C52BAE46B57542034CE
- MD5 SHA1 SHA512 TLSH
VEIL-woolypooly.bat
- SHA256 16d26c7551154d60016b9f32ee2126205245f466c604dee38ae96dba84fe66fd
- MD5 5971716b4ae597b4d47aaaf29a0921a7
- SHA1 148b8478cf85b6a2b9f0da1671bd74e2e1f18545
- SHA512 ec3b64cedb93d0175770510c635826da54bd2debb73ef01f2a6efabdaa8773e67bc33c4f39900b9e5f433faac33e98aa66fceefe680cb48f94843ca52cfb5f36
- TLSH T17DC08CBA6B6F6034A24084489070CE8ECE48A0C28D6941FAAB1C556A682E68953011D6
- MD5 SHA1 SHA512 TLSH
ZANO-luckypool.bat
- SHA256 824ff1ded2aaa79208c4aff348c7debd7bcb380f480ed0176c5742c61078f6f9
- MD5 a6206d6c43c3ccdb04f526067f84f0a4
- SHA1 60ea11b42ccf2cfe0fae8cc096396319fe2d21d4
- SHA512 8a88b462bd540bfc37053241356e299921a54fa45b23b22bb8acb35642dd1c0247c872c55c6fe082d8eafb7278d60330819745e0b734f13bf277c0d06e92253a
- TLSH T112D0233A99C00834E280102464217E0FCEB930B0403305110B0D055EF8160C08610050
- MD5 SHA1 SHA512 TLSH
config_example
- SHA256 557e62f2378d2f1ad31e23c4450af96539824f34631076d15312ac090229a641
- MD5 47e7165d7f78d7087ab8fcea5fe37c72
- SHA1 d9a9a95c0cb84eda7b53e0f641b334a056952f88
- SHA512 8083122d5ce1d4d48a2b6c42f6f29c9bc91ae3bac2898a82b73e2c5254f47b3acaa7527ae00a9e4b74446ef06e152a8c20f6d61526fe29726b29bc47f5d050da
- SSDEEP 192:LM4rzWpxHeZS5Xz5P+1hoYgYRJSIc3NhdbrkDiNM8HI+C:w4rzWpxHuS1z5yoYg+AXtbr5HI+C
- TLSH T10F22A715294A53763D7642E19F0AB646F3195A2F8639ED1430CFC20C274F9A2852FBDF
- MD5 SHA1 SHA512 SSDEEP TLSH
help/API.md
- SHA256 532e20cb71245a6ccb5d1704361375b80fbc8520cc9a4c41bedc3ca42f137f8f
- MD5 3925149f8a4516e3dfd8ccdcec5fdbda
- SHA1 8baf06d69ceb8be74b8678872c97b80d26ea4b46
- SHA512 0d4bd4d574f6002ec2679925f5ec61bf8bc8d2adf0d552539c12fef08b5dec1ae10809bb67efafa7f6e35edc5ad987a1761c700d27042ae4bb4313cc5a0a1ba1
- SSDEEP 96:r9mC/LcM40Zur1hga3iIqeX/KZbiQD25Mkb/uUQBviz5Y6RgW/gO7:r8C/LicuiIqePqbiQm/HAi997
- TLSH T1BF12B56F518186B341760770BF24A66AF71BC35F604A4A1030ADAE2C7FBC914652F6CF
- MD5 SHA1 SHA512 SSDEEP TLSH
help/Dual mining.md
- SHA256 883b872d8e1f9e35633240be988389f730d7087291ddcbf48d8c153b9a42d570
- MD5 bd0723397d5fd6660e68498213c673c0
- SHA1 7ae5943cf82613335498207a94872a7263f0e914
- SHA512 96decde8bc923249e6a38da4ff4bab7f364c7a2b4f3b5719b77948701d28ec3e0369d25a78b3a768aefc461a0a95e9eacececf3745a85b19715bb696ac179f75
- SSDEEP 96:PpShWbxef7II0eQmBlQGPOTPy2/nyl820P+ZOoeLM40t5tjG:BShsxuII0eQulQl/nylr0GZ32KjG
- TLSH T12C91842A6D5E43A90ED0E363329E3381F716617C6B7CCBA4382E0A0A13859A6557D0DE
- MD5 SHA1 SHA512 SSDEEP TLSH
help/FAQ.md
- SHA256 7d887d0f4de6ca66dd881527e86db713acc7fbbb913cebc3fb57dbf5db5f3bb8
- MD5 e93b1f88b4a405fe73d2e088f7432655
- SHA1 b4162b76ffa93305a220cae4afd7d7dbfba80c8f
- SHA512 0669a7ccbc35dafdeed41d93df7b972c7e5dac188447c02981d2214febb4c94240318328f898b2c53000aa37c3b286359abab0da8fff73f41d9cafca09b2424f
- SSDEEP 768:h+mY56ndzRmF1ufartwfBb1mPTwlxQneSmf:htcaqA1mclxqO
- TLSH T140C2E94F6747037602B103A27A1E63E2F306407D2B664636347D906C33B9EBA567B9DD
- MD5 SHA1 SHA512 SSDEEP TLSH
help/LHR.md
- SHA256 58c3c9a68893258a1c04411f3338f20c3eeb95e199ea9965b547d32e8f4dd3da
- MD5 cc88d224b531fa934ae49ce77e82dc45
- SHA1 44b33f19c261fa49465c8db782d83e7850bdf5a6
- SHA512 4f2bb1c84ad8b520cad68bee8fc94c258258feaf20fdbc0dd5706358914524fdb21598b9a0823e2233afead669f40d6f76c06664be24b2aa341096fdec0effc1
- SSDEEP 96:Kfs/t6qHC+SrjjRLCkqRowYH7vzHwLgaY84QGxWgpoMqZzxVfFuFQ:Bt6Dvrg7O9fYgFQGoPfFx
- TLSH T1F2E1A30BBFAA933915F5C7A37A087392EF19413C97099639B06C884C234D9DA467FCD9
- MD5 SHA1 SHA512 SSDEEP TLSH
help/WebUI.md
- SHA256 351b0c7264fcbdfd391fe7decb964f3128616ade2454339a79e818b3ce73f7a0
- MD5 b8bdd32bfb8128c9adecd91fc30b37ff
- SHA1 58dc8c9ffe2ba4e8fb33f986ff7604a4ae704f21
- SHA512 7b3dc13d09fb07e6307d7aa916b4fdc2950d14e54cb01bd25405a3f9d7cacdc1a033622179e4265fdf23bab2e79a212820db30f00c79ce30ddf9d31496c3b18d
- TLSH T1AB61952B960A133302700F52B34EA7F0FB23819DB757816510BC219CB37EA5257BBAD5
- MD5 SHA1 SHA512 TLSH
t-rex.exe
- IMPHASH 54d0b38d31926588f0d34b928f49a004
- SHA256 08e994aa4659a0fd4674d93ed9e683dff7c020013629e39d6ea73091f2bcd33b
- MD5 40532ea36c2d4de56522ecf707bf289e
- SHA1 86520c67e37b43366f965b63ba78070688bff83e
- SHA512 41df9cc910afe6ffe7f92e1e26b607cf7fea18f52a746ca97d532406401035b5bb3ac5ebcb9bc659d4125cbf7262383aefc1f03a01886dc71e268b52ac2b43ce
- SSDEEP 786432:vzdyHYyWqJNk2uDHf1Q+qBS7q0+JYugACoMr7S+Z168C/dnqDL2Jtc2:vJyH+q0BLK+coq0+eUga+q8CVnqPs
- TLSH T11097136A62A802ECD07BC07CD917A903E7B1741B03B09BDF16D599A61F576F09E3EB10
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
37052601
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
winmm
timeBeginPeriod
ws2_32
WSAStartup
advapi32
CryptCreateHash
crypt32
CertOpenStore
kernel32
IsDebuggerPresent
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
LoadStringA
CharUpperBuffW
mswsock
AcceptEx
iphlpapi
GetAdaptersAddresses
bcrypt
BCryptGenRandom
Y(PМ!5�OQ4���� �: �NH�8,� ��xQ�Ǡ��հ�&c��G� ���느3�ݾg�����%�����@q:���j�O*���J�J�J��� U(Ny �k�C\ H��Ӝv��?���C ƒ'�:u��¶� ;a��ӡ�p����V%�tj��|���-����?&�`8��WdKn9oǭٲG��UsQ� x�h�'<�<�|��F��F+wq�LE� �� ��"�h]<�?7��}3�������(��U�~�v��Z�DA���V6�2J[��� /"��J>qǺ�bǿ� 4�c��zc�C>S������f��I�<*�{�b�y�]��V��n��`�I�䮙:aI@� :O�4GlȖf-��͝��|���(,~,�����%�hX+Sh��N �Kl�a 2C�ć��h��R��v��Λ��T�lM"��S��w������>��4~�}���9Q=h^��0"b�fJRH[TTBRe������1`�5G�g��B���xS&��wE����Y2P�����S8R�_]$�/1\T�$Kխ+{��T_i����t?a�R�����<n6_8 ��9|��r�b!g���ێj�3%�h��|v��M�ۿ5�_��>��-{���|:��"/x�����U�E��+0
%��c�^Gs<h!��ܦ]V8���T��f�}���F���Ն߽���8�^ǎ������M��I]�K��ٺ$.@����!�LYE�Z-�6+��J�<��<��_�a��u����xS��>��h�i�L��:_���lI����I�A�t&�>��Bt
%Zń�'�p_� �E-렟Q�NiYj���_�P�Sg�1��# �g��RTrb%*/�=wMօ�6��觰�)� �"�B��4����ݿʩOJ�ل���e� 0K� 2#�j����ň��W8�;���Z룵�R�ы�sI~]c��J"��x/�3�l�PF$�z���t���jc�n}�7 }�� Hk
�:Σ�H�o�C����;��<�� �2�R;d �P֤��'��0`_ ��ڟ��3�~��O pY&w���1���*��#Qꧪ�3A<[� f���d���V�"��x0$�+!��_ z�����;鲏M[>�q��kW��UV�v M�ij7�B���E��Ӛ|.�d 7����kO����^�Je������l2a�D7����~W-i��]A:�a�
�h�j90�Q8�v��At ��Bp9���g�Ox�gv= %��\�� =��Z�כn����Z�1���~��#Eh~�^�ޚ��s�0��?*�?��P; X��U|_w@�u���=#N/��K�e�y��H+��gs���#�_�ס-�zBC�}����)P7p�b�a���jeH ��J��CCm8�zg p�~見I� �|u��=%W�PżP6�$�œ���0�DH����>�
KV�!�|9�9 ��?C2U:FO�1k�s���@� ���iA!I0��r�
�x�ab�����KC�h��]��m8 �!�*���f\Z l��)�:k��N�2 �i����1�b,�ȇ�S���a"�� Ѻ&�8�>!@���P5 R�M�P����:�<Ez��-�V����l �
��ҹ�Y��qۄ��?o�5Y��-�� �SC�@��������C��l=#ڹ�3N��9c�oe�Cq�NyU�K3��l��2Sb ��?�g!��!�c�#T���٩K��^< � ��LЄ�q5�ʝ��3��� C4
�����QD ��$SB@�s\������N�i+d�7����*; 겫=�k�]�<ij^^7�� V���%N�w>���� d.��
��@W��
#[�x| �l��bF�C���:~Cz�ܹ{S�u���,�q̺x� �E�rм��� ̳/(��z�/���Z -�hfCd�(�r�{�ӆ��s��l� Z�j3@���{@�{���0(�+(E0sK��=@QpL*�5]�J����?ֲ��ى0�_�����D�S�/(J ���Ku��z�j�-�� �Ix#J�g�s���ݨjG%�;�5"�]͵��-�'�
�w� ��?0�T@�,��+P��4%c`��U��^�{���ڸ�^���T��`�#��s#�ǰ��4}�N���=kG�"��2�5��W�i[ �]:m��;
��ƞ��v���� ���l5N�@5�y=_fA~ �2�g���A��?H� :[��\�<��x�8��G{���*Y����)��4�� qGT�>k�u�>�Ƹ�[�-4��^>�Bq��T�n;X} غ� ����,���Qe�����~��W�b��^�H�wf��^��m�W��i`�z�8�>?��������<�8�
@U�*+c��3�wj1Tx�r�-����j,!�5߽* 猁�ͳ�E�7$)�U�ʹ�7���7���9>�D�U��Ռ�젴�$rh @ <�j�L�(`�n${�5�
w�u�� �Qp� �uP�=ϧ ����V�r�|� �~�x7�gz�r����/��}�f
6�� ��{�j��g�y ^����8�E2�AR�Kp[�܌F$,5H�r^JC�`z$�me������-e�ĪC^Uwp�
��ңf3 m�HZ:Ehȸ��d�{���R5���Uh���A���Ϡ�8�[��?|>�y{k�/�9�3����;�%Q� ��� 5~��y�Xq�»� ���,z~f�#6�����&f��נ&/�p���8`Rc����}�JQ�����#�´��sX�yfݰ�/��~Z/oV
��p5���D�N<��.��&�TU��ր����'�����p �=&�q~h|��nI��K��J�� �^83��Rd�B�u�Q�7>��a{b[�iY{�h����~7�����%�d�\ޞ7"�� v�g��t�;��T�3��!%Fz��V栌�'�����|� eV��)�w&i��c��8
Ñ2�5b���g�L=a f���\H�w2��#���Y����4��8
���}L��B�D��a� �>᭤����r��ȝ���r��@����ղ��of����ύ�Uߣ��'���������c���|Ӕ|�K�؟{�!��z�Q�3�ƹ�H��\�Y�'�*�*�ć Z��
argon2_ctx
argon2_ctx_from_mtp
argon2_encodedlen
argon2_error_message
argon2_hash
argon2_type2string
argon2_verify
argon2_verify_ctx
argon2d_ctx
argon2d_hash_encoded
argon2d_hash_raw
argon2d_verify
argon2d_verify_ctx
argon2i_ctx
argon2i_hash_encoded
argon2i_hash_raw
argon2i_verify
argon2i_verify_ctx
argon2id_ctx
argon2id_hash_encoded
argon2id_hash_raw
argon2id_verify
argon2id_verify_ctx
init_argon2d_param
Name
.text
Size
4.9MB
Virtual Size
4.9MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
26.0MB
Virtual Size
26.0MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
123KB
Virtual Size
184KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
178KB
Virtual Size
177KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
_RDATA
Size
512B
Virtual Size
244B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.Wye0
Size
3.7MB
Virtual Size
3.7MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.Wye1
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.Wye2
Size
3.2MB
Virtual Size
3.2MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
41KB
Virtual Size
40KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
67KB
Virtual Size
67KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ