4d4beaa5d7136eaf23d5f6cc6f0a040fb36e16ec833e6ace663f0eaf35cb4d5d | Triage™

Login
Reports

Overview

overview

3

Static

static

3

start-Conf...rs.bat

windows10-2004-x64

3

start-Conf...rs.bat

windows11-ltsc_2024-x64

3

start-Conf...ex.bat

windows10-2004-x64

3

start-Conf...ex.bat

windows11-ltsc_2024-x64

3

start-Conf...ol.bat

windows10-2004-x64

3

start-Conf...ol.bat

windows11-ltsc_2024-x64

3

start-Ergo...rs.bat

windows10-2004-x64

3

start-Ergo...rs.bat

windows11-ltsc_2024-x64

3

start-Ergo...rs.bat

windows10-2004-x64

3

start-Ergo...rs.bat

windows11-ltsc_2024-x64

3

start-Ergo...ex.bat

windows10-2004-x64

3

start-Ergo...ex.bat

windows11-ltsc_2024-x64

3

start-Nexa.bat

windows10-2004-x64

3

start-Nexa.bat

windows11-ltsc_2024-x64

3

start-Para...ab.bat

windows10-2004-x64

3

start-Para...ab.bat

windows11-ltsc_2024-x64

3

start-Para...nt.bat

windows10-2004-x64

3

start-Para...nt.bat

windows11-ltsc_2024-x64

3

start-Para...va.bat

windows10-2004-x64

3

start-Para...va.bat

windows11-ltsc_2024-x64

3

start-Pearl.bat

windows10-2004-x64

3

start-Pearl.bat

windows11-ltsc_2024-x64

3

start-Quan...ex.bat

windows10-2004-x64

3

start-Quan...ex.bat

windows11-ltsc_2024-x64

3

start-Quan...ol.bat

windows10-2004-x64

3

start-Quan...ol.bat

windows11-ltsc_2024-x64

3

start-Quan...nt.bat

windows10-2004-x64

3

start-Quan...nt.bat

windows11-ltsc_2024-x64

3

start-Qubi...ol.bat

windows10-2004-x64

3

start-Qubi...ol.bat

windows11-ltsc_2024-x64

3

start-Qubi...ol.bat

windows10-2004-x64

3

start-Qubi...ol.bat

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
wildrig-ng-windows-1.0.0t.zip
Size 13.5MB
Sample261107-nypxjaxt9m
SHA256 4d4beaa5d7136eaf23d5f6cc6f0a040fb36e16ec833e6ace663f0eaf35cb4d5d
MD5 2848ec5fdf3136c52996865b46ec72f5
SHA1 31f6692a0f6164cfec50a4c5315658c77a608016
SHA512 237da3f2dcbfcf070c7cde21581f15d5860ed86aacd1d77ccdfd0d37ccda15247583e3f793914d972f67a502609fecfacf3559d82ca94deed1e600d7f4d29d0e
SSDEEP 393216:1YTZ0949WM/Ay8kQe7RSbEHXVS1ENZy1hgq9u:1YOwWMZogI1V1hlE
TLSH
T15FE633D252EC065EEFF9BC75A42B8F224E4459A873BC638DB4E06377BC4291150A9CF1
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

start-Conflux-HeroMiners.bat

Resource

win10v2004-20260911-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral2

Sample

start-Conflux-HeroMiners.bat

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral3

Sample

start-Conflux-Kryptex.bat

Resource

win10v2004-20260911-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral4

Sample

start-Conflux-Kryptex.bat

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral5

Sample

start-Conflux-Nanopool.bat

Resource

win10v2004-20260911-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral6

Sample

start-Conflux-Nanopool.bat

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral7

Sample

start-Ergo-2Miners.bat

Resource

win10v2004-20260911-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral8

Sample

start-Ergo-2Miners.bat

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral9

Sample

start-Ergo-HeroMiners.bat

Resource

win10v2004-20260911-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral10

Sample

start-Ergo-HeroMiners.bat

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral11

Sample

start-Ergo-Kryptex.bat

Resource

win10v2004-20260911-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral12

Sample

start-Ergo-Kryptex.bat

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral13

Sample

start-Nexa.bat

Resource

win10v2004-20260911-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral14

Sample

start-Nexa.bat

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral15

Sample

start-Parano1d-Innovlab.bat

Resource

win10v2004-20260911-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral16

Sample

start-Parano1d-Innovlab.bat

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral17

Sample

start-Parano1d-RPlant.bat

Resource

win10v2004-20260911-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral18

Sample

start-Parano1d-RPlant.bat

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral19

Sample

start-Parano1d-Suprnova.bat

Resource

win10v2004-20260911-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral20

Sample

start-Parano1d-Suprnova.bat

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral21

Sample

start-Pearl.bat

Resource

win10v2004-20260911-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral22

Sample

start-Pearl.bat

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral23

Sample

start-Quantus-Kryptex.bat

Resource

win10v2004-20260911-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral24

Sample

start-Quantus-Kryptex.bat

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral25

Sample

start-Quantus-LuckyPool.bat

Resource

win10v2004-20260911-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral26

Sample

start-Quantus-LuckyPool.bat

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral27

Sample

start-Quantus-RPlant.bat

Resource

win10v2004-20260911-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral28

Sample

start-Quantus-RPlant.bat

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral29

Sample

start-Qubitcoin-K1Pool.bat

Resource

win10v2004-20260911-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral30

Sample

start-Qubitcoin-K1Pool.bat

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral31

Sample

start-Qubitcoin-LuckyPool.bat

Resource

win10v2004-20260911-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral32

Sample

start-Qubitcoin-LuckyPool.bat

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Malware Config

Targets

- Target
  start-Conflux-HeroMiners.bat
- Size 230B
- SHA256 90c30f1402a711d0513201dc41a7e132051a08ea205149fdf00b8b71f9ddc649
- MD5 454e3a2c55ac9a7f76252dcff60c7e4a
- SHA1 55901e0dbe7cf2c782bf950c1231db1d0bf24042
- SHA512 0af5f8092c66287927d49d40bb38003e8872081a7cc6e9abaf427415567f7a1f30f2a9bfd0be7664614b975f03864991382d117ffb4b2cd74849b85885d76417
- TLSH
  T180D0970A5F0A2BAAA1F40800BE3C3A022E0B0043CA0BB6C83010E52C780B08AA7401CC
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  start-Conflux-Kryptex.bat
- Size 215B
- SHA256 e026ac3c32634302bffcfb8ec0c05ebef81dd8d4f99947cf075a25bd81581b18
- MD5 93a3d465ed33803bae19f2c4009adc76
- SHA1 6bedf55bfac685a4a905ecb767d886fb0838b2d5
- SHA512 faa24ce545ff8c92b587f30f7895ae249f5bd0cfc1f4e9ef285faa286c72df6e2a87561e0166c230a97c89e75cd7008cfd35648487241eaf9ee18bcd26f133c4
- TLSH
  T1A5D02317554A15ED607A1960767D33032F4B5057C50777DC3115D554554710F87442CC
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  start-Conflux-Nanopool.bat
- Size 237B
- SHA256 bf736eb2cb31b1c20a129c91634ab173ee545df6bd52bb8544dacf7262f87c3f
- MD5 184504b09bdd40511942a7a9530cab71
- SHA1 2318a790c9d77cf10c16dc8855746b7ebdcfbf08
- SHA512 707f1a06a2f58c5ae7bacbd07feafc190d7fa002bb1629749678282b54a1d0bd3f12d28f54a1da050352fddc2a3a0230edb92be99d726a3a8debc07ae43a120c
- TLSH
  T12CD0972E5A4E29A8D0F75C00BA3D26472F438047CA8737D83116EA28284B0498B002C8
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  start-Ergo-2Miners.bat
- Size 223B
- SHA256 afa167fb47cfbd2e60384c58ea591115cafa6491ca686dce92ff20b3f665c65b
- MD5 b9f5c1d46ff4905cf3510afe9e7f7a8b
- SHA1 73c9d85f97d082d327c55a55176d9e9a919ed347
- SHA512 d8161567ab7d44ed03d509a2145a9d0b3fbb40de395021f37f04e744be458528617ad30e87888974f29d87d7b77cc7efb99f5f6d2612e91eb1a11407153ab36a
- TLSH
  T1B2D0A71A5A4A27FD627144543D3D32065E874047DB4676D83661D618B54B14946541C5
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  start-Ergo-HeroMiners.bat
- Size 230B
- SHA256 fbcb31089b530b3020dc80230365ff6385f8c7b1b6aaa7989c382549fe96c0a6
- MD5 3454acb5a8a0e7c11eaebda661cddacb
- SHA1 80fdfea44c75d22432dceb9b532f8bcd3b42b7cc
- SHA512 9da952db30863aab5400bf13edead88ecdce8289912a19d62128fb566c1d4401815f4f88ee9c0cf5d6571fb71422cde7bdccb2751f2d404cb9befd6ba3924c0f
- TLSH
  T1C2D0970B1A0A27FE22F148807A3C22021ECB0043DA06BAD83121E528B00B08983581CE
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  start-Ergo-Kryptex.bat
- Size 218B
- SHA256 ef59548a252dd18c9aca4ca81554f8488b022394c7824bb4307082c18e7edd3d
- MD5 90f851eceef47d2823dba6343181f347
- SHA1 c0c8b7cc73018e37ef6ca73ab4797dcb0d3322e3
- SHA512 813d96fa3735dd29a644639b7510b0b0aa8723653c3e380e8703bbc37bfcadac22434dc76fc59238a4dff3cfc5fd0b1b66924c7179980eaeeb8960cf5c593429
- TLSH
  T120D02307154A26FD32715555363D63035FCB0057DB0776DC3155D5545547509C7541C9
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  start-Nexa.bat
- Size 262B
- SHA256 19e9c6cedca4ad5998ebc5ca97a4a8303f2116cb1a1358644409132165e11bb3
- MD5 bfe6b7050bbaa8e2e63ca4835daa3fd0
- SHA1 057586677309ee81bd34be7cd3241e83fcf47a18
- SHA512 ddf2495f173b8e51d318decb056a236a2c100ff7c39a9272ae51f7d6c3d8c8a9064ff378d150de5f579f1686882bcbd34fec8220ffd721f6fa34ca89a1388d3e
- TLSH
  T1B4D0950B7D6B356510B94510747C93415ECB509BC79633F07245D2247D4B04542511C5
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  start-Parano1d-Innovlab.bat
- Size 218B
- SHA256 d0a889dc9a44a8d1af8e5e08ceeb6b94b0f9d2546365c096d056635c4a6f3c21
- MD5 49a6c934843885d90d554b853ec82b03
- SHA1 3ff222c57ddafbcd97e885212374a59802e0a30a
- SHA512 ecb90ea8e57d2419aabca103471e8cfcfab86abb47a0254418260404ff6cefca3b959034d0eb4cfaef3e1fe53d860d2120305e3a9e0c8c02f4aa054d9c2792f0
- TLSH
  T1AFD0230F294F69F925754460763D13432F970003C547B2DC74A1E714758B145C3905C7
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  start-Parano1d-RPlant.bat
- Size 215B
- SHA256 f1ffba3630b89f5446e0c13e5e6614943f7cdc34f8bd9008aa1b980573c35b96
- MD5 0d9f4d2053012715065d01344c84bc9a
- SHA1 327a94a8a6f2c004c8ba5b16062eb9aa700a4509
- SHA512 1bca9b63783c9893eafa3cfbf7a6d835ac897f076f888a02f995cec87c9c5126c73e12de4fefc69839a16a5c4a82e6489c0e9fae794e8cc400cdaf6a2e89d244
- TLSH
  T1AAD0230E294F37F961B54450763D12421F974043CA4773DC3151E714798F10543555D6
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  start-Parano1d-Suprnova.bat
- Size 218B
- SHA256 8f330d786ad2c5ae456e758912421252fd1fbda0ff5de7dc518de3e1c09e44fc
- MD5 abff4348605475556a2b30847c749981
- SHA1 f3c35771c7f0c24068db8fc0fc3b4c4ff184249b
- SHA512 99a8a64ac6ee1d59eea920dc05408786dc19d389afb6e1988990bb77856d369f076dc76f34c396552249227e0bf85d6d364b54fb8dbe9f4a8f737abcacbcea8b
- TLSH
  T1B4D0230E294B35F9117544507E3D12022F4B0043DF4776DC3469F654758B18543A01C6
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  start-Pearl.bat
- Size 262B
- SHA256 307ffc5ca657ee90991c2a9900471ee944787fd366de3df4eb4ff6ded0f6c1ce
- MD5 52a674969e0fd1bc87522396f025ef0a
- SHA1 c676b14e916a3ca4509344f19a5053d0d1325009
- SHA512 cfe99fbae481f78ace57b2c4485f66f88cc7ca254acf8ceb98294e747b952a468df76b7a27c50985021a97a4923e17e7cf60b3efd318f41dd7befb52424ed012
- TLSH
  T1E0D02B01810B659D05F24F21257D62431F9F404BC65B67C0B142E714368F4064B895D5
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  start-Quantus-Kryptex.bat
- Size 215B
- SHA256 95f2519f769fbdf4c47bec04c277fc0b71836649c4c4bbb6acf5ef1f5ecb5bb6
- MD5 f314813b2c9277e95beaa733b95bfb89
- SHA1 bfa41e405332de7d3882f1ea4a86309f4fcc7ce2
- SHA512 caf3ee7fbe19051796d25b75cc96d3993a75ed7634dad7dcd9a6e2537e1d10d0813addd8cefe5a40d51627fcab71e450c40baf779d8dc6ab793c1ad344e42fef
- TLSH
  T1D7D02307220A16EC20B40810363D33027F1F1043C60B32DC3115EB10110B00D83C40CC
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  start-Quantus-LuckyPool.bat
- Size 219B
- SHA256 742af1f0273e1f8000924802609b01a734c76d7f7b667c90d5362308a029a0d1
- MD5 a283c6d43cc0cdc0c0ce02edd6d80837
- SHA1 eb28db6fd93afe2a74b6554b1968af2d73965dcf
- SHA512 35fdeaae751b778e8b17f0349dc5e45c6a9587f2a0fae1ffdd5ff2567b749a3574f2830ae3952eaa70e08d0766e6f36108a148cfe977cfc3879cf4e8020432e4
- TLSH
  T19FD0231B2A0F12E920B40900B63C23022F5B4013CB8FB2DC3110E615304B00883400CD
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  start-Quantus-RPlant.bat
- Size 218B
- SHA256 e55984e5961cf4ce294ca0cfd724363dee7ae5cf2efc423bbbb0b290b219c435
- MD5 730aa1b4e7297eafc971d6fb961bdd09
- SHA1 0c6aebeab7869de2d8884b9e422d94d6d0538a19
- SHA512 0c45f293295ad8e63ca8037627183282e84ce845a92fb7639cab11b7d8896534f8365185011ef36c77329f8bcb8dc4f1e00608fc1d4e1a9735b7f9299ffad73a
- TLSH
  T1DED0231E664F37E922B90550753D23422F5B4043C98773EC3151F714754F10983551DA
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral27 behavioral28
- Target
  start-Qubitcoin-K1Pool.bat
- Size 218B
- SHA256 50cc813aa4ab4243d587c1edf64df1f8eaf44055d34e1749a4e460bcc5ca9c0d
- MD5 775f3713b067d2c01d68152736f2017a
- SHA1 bd1c7c1b179501c186d2d6a09415d75e7343637b
- SHA512 cce939276568ccab9a19405ba83a93046c635bedcdff235194b708f43901991afd17b684b46e34a42fe4fe1d7e88956de33703e8c30fb0ceb847ede97afa39f0
- TLSH
  T185D0A70A564A16ED31B15A10763D21435E870047DA4AF2E47141FB15764F14992541DA
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral29 behavioral30
- Target
  start-Qubitcoin-LuckyPool.bat
- Size 225B
- SHA256 ebf66b2ec081d599a5b2c1997e4798e082504137e08dbf98990561cd7e300cc1
- MD5 10ec3956e2ef855f8bbdccb03abea69b
- SHA1 a209fd1771663960c2a779572655c5b0377dbca1
- SHA512 ce4633206824afe36263dc853d7db1dd570f211a052ec083357eff5b6bc64bacdd25ca55cc040df71643500a7583f12e265f23f3a224f141d97256c5986f9ef6
- TLSH
  T189D0970A560A12ED62B00660392D22032F9B0043CD46B3E83000E614B60F108CB001D8
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Windows Command Shell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32

© 2018-2026

Terms | Privacy