wildrig-ng-windows-1.0.0t.zip
- SHA256 4d4beaa5d7136eaf23d5f6cc6f0a040fb36e16ec833e6ace663f0eaf35cb4d5d
Overview
overview
3Static
static
3start-Conf...rs.bat
windows10-2004-x64
3start-Conf...rs.bat
windows11-ltsc_2024-x64
3start-Conf...ex.bat
windows10-2004-x64
3start-Conf...ex.bat
windows11-ltsc_2024-x64
3start-Conf...ol.bat
windows10-2004-x64
3start-Conf...ol.bat
windows11-ltsc_2024-x64
3start-Ergo...rs.bat
windows10-2004-x64
3start-Ergo...rs.bat
windows11-ltsc_2024-x64
3start-Ergo...rs.bat
windows10-2004-x64
3start-Ergo...rs.bat
windows11-ltsc_2024-x64
3start-Ergo...ex.bat
windows10-2004-x64
3start-Ergo...ex.bat
windows11-ltsc_2024-x64
3start-Nexa.bat
windows10-2004-x64
3start-Nexa.bat
windows11-ltsc_2024-x64
3start-Para...ab.bat
windows10-2004-x64
3start-Para...ab.bat
windows11-ltsc_2024-x64
3start-Para...nt.bat
windows10-2004-x64
3start-Para...nt.bat
windows11-ltsc_2024-x64
3start-Para...va.bat
windows10-2004-x64
3start-Para...va.bat
windows11-ltsc_2024-x64
3start-Pearl.bat
windows10-2004-x64
3start-Pearl.bat
windows11-ltsc_2024-x64
3start-Quan...ex.bat
windows10-2004-x64
3start-Quan...ex.bat
windows11-ltsc_2024-x64
3start-Quan...ol.bat
windows10-2004-x64
3start-Quan...ol.bat
windows11-ltsc_2024-x64
3start-Quan...nt.bat
windows10-2004-x64
3start-Quan...nt.bat
windows11-ltsc_2024-x64
3start-Qubi...ol.bat
windows10-2004-x64
3start-Qubi...ol.bat
windows11-ltsc_2024-x64
3start-Qubi...ol.bat
windows10-2004-x64
3start-Qubi...ol.bat
windows11-ltsc_2024-x64
3Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
start-Conflux-HeroMiners.bat
Resource
win10v2004-20260911-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
start-Conflux-HeroMiners.bat
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral3
Sample
start-Conflux-Kryptex.bat
Resource
win10v2004-20260911-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral4
Sample
start-Conflux-Kryptex.bat
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral5
Sample
start-Conflux-Nanopool.bat
Resource
win10v2004-20260911-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral6
Sample
start-Conflux-Nanopool.bat
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral7
Sample
start-Ergo-2Miners.bat
Resource
win10v2004-20260911-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral8
Sample
start-Ergo-2Miners.bat
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral9
Sample
start-Ergo-HeroMiners.bat
Resource
win10v2004-20260911-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral10
Sample
start-Ergo-HeroMiners.bat
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral11
Sample
start-Ergo-Kryptex.bat
Resource
win10v2004-20260911-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral12
Sample
start-Ergo-Kryptex.bat
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral13
Sample
start-Nexa.bat
Resource
win10v2004-20260911-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral14
Sample
start-Nexa.bat
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral15
Sample
start-Parano1d-Innovlab.bat
Resource
win10v2004-20260911-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral16
Sample
start-Parano1d-Innovlab.bat
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral17
Sample
start-Parano1d-RPlant.bat
Resource
win10v2004-20260911-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral18
Sample
start-Parano1d-RPlant.bat
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral19
Sample
start-Parano1d-Suprnova.bat
Resource
win10v2004-20260911-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral20
Sample
start-Parano1d-Suprnova.bat
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral21
Sample
start-Pearl.bat
Resource
win10v2004-20260911-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral22
Sample
start-Pearl.bat
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral23
Sample
start-Quantus-Kryptex.bat
Resource
win10v2004-20260911-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral24
Sample
start-Quantus-Kryptex.bat
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral25
Sample
start-Quantus-LuckyPool.bat
Resource
win10v2004-20260911-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral26
Sample
start-Quantus-LuckyPool.bat
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral27
Sample
start-Quantus-RPlant.bat
Resource
win10v2004-20260911-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral28
Sample
start-Quantus-RPlant.bat
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral29
Sample
start-Qubitcoin-K1Pool.bat
Resource
win10v2004-20260911-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral30
Sample
start-Qubitcoin-K1Pool.bat
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral31
Sample
start-Qubitcoin-LuckyPool.bat
Resource
win10v2004-20260911-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral32
Sample
start-Qubitcoin-LuckyPool.bat
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
General
- Target wildrig-ng-windows-1.0.0t.zip
- Size 13.5MB
- Sample261107-nypxjaxt9m
- SHA256 4d4beaa5d7136eaf23d5f6cc6f0a040fb36e16ec833e6ace663f0eaf35cb4d5d
- MD5 2848ec5fdf3136c52996865b46ec72f5
- SHA1 31f6692a0f6164cfec50a4c5315658c77a608016
- SHA512 237da3f2dcbfcf070c7cde21581f15d5860ed86aacd1d77ccdfd0d37ccda15247583e3f793914d972f67a502609fecfacf3559d82ca94deed1e600d7f4d29d0e
- SSDEEP 393216:1YTZ0949WM/Ay8kQe7RSbEHXVS1ENZy1hgq9u:1YOwWMZogI1V1hlE
- TLSH T15FE633D252EC065EEFF9BC75A42B8F224E4459A873BC638DB4E06377BC4291150A9CF1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/wildrig-ng.exe
File Explorer
-
wildrig-ng-windows-1.0.0t.zip.zip 13.5MB
-
LICENSE.txt504B
-
start-Conflux-HeroMiners.bat.bat 230B
-
start-Conflux-Kryptex.bat.bat 215B
-
start-Conflux-Nanopool.bat.bat 237B
-
start-Ergo-2Miners.bat.bat 223B
-
start-Ergo-HeroMiners.bat.bat 230B
-
start-Ergo-Kryptex.bat.bat 218B
-
start-Nexa.bat.bat 262B
-
start-Parano1d-Innovlab.bat.bat 218B
-
start-Parano1d-RPlant.bat.bat 215B
-
start-Parano1d-Suprnova.bat.bat 218B
-
start-Pearl.bat.bat 262B
-
start-Quantus-Kryptex.bat.bat 215B
-
start-Quantus-LuckyPool.bat.bat 219B
-
start-Quantus-RPlant.bat.bat 218B
-
start-Qubitcoin-K1Pool.bat.bat 218B
-
start-Qubitcoin-LuckyPool.bat.bat 225B
-
start-Qubitcoin-RPlant.bat.bat 216B
-
start-Ravencoin-2Miners.bat.bat 219B
-
start-Ravencoin-Nanopool.bat.bat 225B
-
start-Ravencoin-RavenMiner.bat.bat 221B
-
start-Xelis-HeroMiners.bat.bat 232B
-
start-Xelis-K1Pool.bat.bat 224B
-
start-Xelis-Kryptex.bat.bat 219B
-
start-Zano-HeroMiners.bat.bat 219B
-
start-Zano-LuckyPool.bat.bat 214B
-
start-Zano-WoolyPooly.bat.bat 213B
-
wildrig-ng.exe.exe 14.9MB
LICENSE.txt
- SHA256 133f2037ff2acfde9f02430daba6e9899a09b81815668dcc7f82a3a0e76bc5a5
- MD5 670eeabd866ac0177408c466be1b2d62
- SHA1 e2e433b818cfde09678c645eb8c171e565d95048
- SHA512 5d6e7d1bd344ee148930db2369ebe5a68d543edd53748b4edd88deef881dbd49e1ca9ef2468248e6d3b4d732dd9f4a36dd5489dde1c67685d176947b23febb04
- TLSH T19CF0541EE3CA33FB35D103E4618846D4AD9DF1373B2406A15A2F123C17DC3962A3BA99
- MD5 SHA1 SHA512 TLSH
start-Conflux-HeroMiners.bat
- SHA256 90c30f1402a711d0513201dc41a7e132051a08ea205149fdf00b8b71f9ddc649
- MD5 454e3a2c55ac9a7f76252dcff60c7e4a
- SHA1 55901e0dbe7cf2c782bf950c1231db1d0bf24042
- SHA512 0af5f8092c66287927d49d40bb38003e8872081a7cc6e9abaf427415567f7a1f30f2a9bfd0be7664614b975f03864991382d117ffb4b2cd74849b85885d76417
- TLSH T180D0970A5F0A2BAAA1F40800BE3C3A022E0B0043CA0BB6C83010E52C780B08AA7401CC
- MD5 SHA1 SHA512 TLSH
start-Conflux-Kryptex.bat
- SHA256 e026ac3c32634302bffcfb8ec0c05ebef81dd8d4f99947cf075a25bd81581b18
- MD5 93a3d465ed33803bae19f2c4009adc76
- SHA1 6bedf55bfac685a4a905ecb767d886fb0838b2d5
- SHA512 faa24ce545ff8c92b587f30f7895ae249f5bd0cfc1f4e9ef285faa286c72df6e2a87561e0166c230a97c89e75cd7008cfd35648487241eaf9ee18bcd26f133c4
- TLSH T1A5D02317554A15ED607A1960767D33032F4B5057C50777DC3115D554554710F87442CC
- MD5 SHA1 SHA512 TLSH
start-Conflux-Nanopool.bat
- SHA256 bf736eb2cb31b1c20a129c91634ab173ee545df6bd52bb8544dacf7262f87c3f
- MD5 184504b09bdd40511942a7a9530cab71
- SHA1 2318a790c9d77cf10c16dc8855746b7ebdcfbf08
- SHA512 707f1a06a2f58c5ae7bacbd07feafc190d7fa002bb1629749678282b54a1d0bd3f12d28f54a1da050352fddc2a3a0230edb92be99d726a3a8debc07ae43a120c
- TLSH T12CD0972E5A4E29A8D0F75C00BA3D26472F438047CA8737D83116EA28284B0498B002C8
- MD5 SHA1 SHA512 TLSH
start-Ergo-2Miners.bat
- SHA256 afa167fb47cfbd2e60384c58ea591115cafa6491ca686dce92ff20b3f665c65b
- MD5 b9f5c1d46ff4905cf3510afe9e7f7a8b
- SHA1 73c9d85f97d082d327c55a55176d9e9a919ed347
- SHA512 d8161567ab7d44ed03d509a2145a9d0b3fbb40de395021f37f04e744be458528617ad30e87888974f29d87d7b77cc7efb99f5f6d2612e91eb1a11407153ab36a
- TLSH T1B2D0A71A5A4A27FD627144543D3D32065E874047DB4676D83661D618B54B14946541C5
- MD5 SHA1 SHA512 TLSH
start-Ergo-HeroMiners.bat
- SHA256 fbcb31089b530b3020dc80230365ff6385f8c7b1b6aaa7989c382549fe96c0a6
- MD5 3454acb5a8a0e7c11eaebda661cddacb
- SHA1 80fdfea44c75d22432dceb9b532f8bcd3b42b7cc
- SHA512 9da952db30863aab5400bf13edead88ecdce8289912a19d62128fb566c1d4401815f4f88ee9c0cf5d6571fb71422cde7bdccb2751f2d404cb9befd6ba3924c0f
- TLSH T1C2D0970B1A0A27FE22F148807A3C22021ECB0043DA06BAD83121E528B00B08983581CE
- MD5 SHA1 SHA512 TLSH
start-Ergo-Kryptex.bat
- SHA256 ef59548a252dd18c9aca4ca81554f8488b022394c7824bb4307082c18e7edd3d
- MD5 90f851eceef47d2823dba6343181f347
- SHA1 c0c8b7cc73018e37ef6ca73ab4797dcb0d3322e3
- SHA512 813d96fa3735dd29a644639b7510b0b0aa8723653c3e380e8703bbc37bfcadac22434dc76fc59238a4dff3cfc5fd0b1b66924c7179980eaeeb8960cf5c593429
- TLSH T120D02307154A26FD32715555363D63035FCB0057DB0776DC3155D5545547509C7541C9
- MD5 SHA1 SHA512 TLSH
start-Nexa.bat
- SHA256 19e9c6cedca4ad5998ebc5ca97a4a8303f2116cb1a1358644409132165e11bb3
- MD5 bfe6b7050bbaa8e2e63ca4835daa3fd0
- SHA1 057586677309ee81bd34be7cd3241e83fcf47a18
- SHA512 ddf2495f173b8e51d318decb056a236a2c100ff7c39a9272ae51f7d6c3d8c8a9064ff378d150de5f579f1686882bcbd34fec8220ffd721f6fa34ca89a1388d3e
- TLSH T1B4D0950B7D6B356510B94510747C93415ECB509BC79633F07245D2247D4B04542511C5
- MD5 SHA1 SHA512 TLSH
start-Parano1d-Innovlab.bat
- SHA256 d0a889dc9a44a8d1af8e5e08ceeb6b94b0f9d2546365c096d056635c4a6f3c21
- MD5 49a6c934843885d90d554b853ec82b03
- SHA1 3ff222c57ddafbcd97e885212374a59802e0a30a
- SHA512 ecb90ea8e57d2419aabca103471e8cfcfab86abb47a0254418260404ff6cefca3b959034d0eb4cfaef3e1fe53d860d2120305e3a9e0c8c02f4aa054d9c2792f0
- TLSH T1AFD0230F294F69F925754460763D13432F970003C547B2DC74A1E714758B145C3905C7
- MD5 SHA1 SHA512 TLSH
start-Parano1d-RPlant.bat
- SHA256 f1ffba3630b89f5446e0c13e5e6614943f7cdc34f8bd9008aa1b980573c35b96
- MD5 0d9f4d2053012715065d01344c84bc9a
- SHA1 327a94a8a6f2c004c8ba5b16062eb9aa700a4509
- SHA512 1bca9b63783c9893eafa3cfbf7a6d835ac897f076f888a02f995cec87c9c5126c73e12de4fefc69839a16a5c4a82e6489c0e9fae794e8cc400cdaf6a2e89d244
- TLSH T1AAD0230E294F37F961B54450763D12421F974043CA4773DC3151E714798F10543555D6
- MD5 SHA1 SHA512 TLSH
start-Parano1d-Suprnova.bat
- SHA256 8f330d786ad2c5ae456e758912421252fd1fbda0ff5de7dc518de3e1c09e44fc
- MD5 abff4348605475556a2b30847c749981
- SHA1 f3c35771c7f0c24068db8fc0fc3b4c4ff184249b
- SHA512 99a8a64ac6ee1d59eea920dc05408786dc19d389afb6e1988990bb77856d369f076dc76f34c396552249227e0bf85d6d364b54fb8dbe9f4a8f737abcacbcea8b
- TLSH T1B4D0230E294B35F9117544507E3D12022F4B0043DF4776DC3469F654758B18543A01C6
- MD5 SHA1 SHA512 TLSH
start-Pearl.bat
- SHA256 307ffc5ca657ee90991c2a9900471ee944787fd366de3df4eb4ff6ded0f6c1ce
- MD5 52a674969e0fd1bc87522396f025ef0a
- SHA1 c676b14e916a3ca4509344f19a5053d0d1325009
- SHA512 cfe99fbae481f78ace57b2c4485f66f88cc7ca254acf8ceb98294e747b952a468df76b7a27c50985021a97a4923e17e7cf60b3efd318f41dd7befb52424ed012
- TLSH T1E0D02B01810B659D05F24F21257D62431F9F404BC65B67C0B142E714368F4064B895D5
- MD5 SHA1 SHA512 TLSH
start-Quantus-Kryptex.bat
- SHA256 95f2519f769fbdf4c47bec04c277fc0b71836649c4c4bbb6acf5ef1f5ecb5bb6
- MD5 f314813b2c9277e95beaa733b95bfb89
- SHA1 bfa41e405332de7d3882f1ea4a86309f4fcc7ce2
- SHA512 caf3ee7fbe19051796d25b75cc96d3993a75ed7634dad7dcd9a6e2537e1d10d0813addd8cefe5a40d51627fcab71e450c40baf779d8dc6ab793c1ad344e42fef
- TLSH T1D7D02307220A16EC20B40810363D33027F1F1043C60B32DC3115EB10110B00D83C40CC
- MD5 SHA1 SHA512 TLSH
start-Quantus-LuckyPool.bat
- SHA256 742af1f0273e1f8000924802609b01a734c76d7f7b667c90d5362308a029a0d1
- MD5 a283c6d43cc0cdc0c0ce02edd6d80837
- SHA1 eb28db6fd93afe2a74b6554b1968af2d73965dcf
- SHA512 35fdeaae751b778e8b17f0349dc5e45c6a9587f2a0fae1ffdd5ff2567b749a3574f2830ae3952eaa70e08d0766e6f36108a148cfe977cfc3879cf4e8020432e4
- TLSH T19FD0231B2A0F12E920B40900B63C23022F5B4013CB8FB2DC3110E615304B00883400CD
- MD5 SHA1 SHA512 TLSH
start-Quantus-RPlant.bat
- SHA256 e55984e5961cf4ce294ca0cfd724363dee7ae5cf2efc423bbbb0b290b219c435
- MD5 730aa1b4e7297eafc971d6fb961bdd09
- SHA1 0c6aebeab7869de2d8884b9e422d94d6d0538a19
- SHA512 0c45f293295ad8e63ca8037627183282e84ce845a92fb7639cab11b7d8896534f8365185011ef36c77329f8bcb8dc4f1e00608fc1d4e1a9735b7f9299ffad73a
- TLSH T1DED0231E664F37E922B90550753D23422F5B4043C98773EC3151F714754F10983551DA
- MD5 SHA1 SHA512 TLSH
start-Qubitcoin-K1Pool.bat
- SHA256 50cc813aa4ab4243d587c1edf64df1f8eaf44055d34e1749a4e460bcc5ca9c0d
- MD5 775f3713b067d2c01d68152736f2017a
- SHA1 bd1c7c1b179501c186d2d6a09415d75e7343637b
- SHA512 cce939276568ccab9a19405ba83a93046c635bedcdff235194b708f43901991afd17b684b46e34a42fe4fe1d7e88956de33703e8c30fb0ceb847ede97afa39f0
- TLSH T185D0A70A564A16ED31B15A10763D21435E870047DA4AF2E47141FB15764F14992541DA
- MD5 SHA1 SHA512 TLSH
start-Qubitcoin-LuckyPool.bat
- SHA256 ebf66b2ec081d599a5b2c1997e4798e082504137e08dbf98990561cd7e300cc1
- MD5 10ec3956e2ef855f8bbdccb03abea69b
- SHA1 a209fd1771663960c2a779572655c5b0377dbca1
- SHA512 ce4633206824afe36263dc853d7db1dd570f211a052ec083357eff5b6bc64bacdd25ca55cc040df71643500a7583f12e265f23f3a224f141d97256c5986f9ef6
- TLSH T189D0970A560A12ED62B00660392D22032F9B0043CD46B3E83000E614B60F108CB001D8
- MD5 SHA1 SHA512 TLSH
start-Qubitcoin-RPlant.bat
- SHA256 b99286be93fd035f61ac8407d43483e4ee7f3aa08f407ab7817eb9d4e6162232
- MD5 0b773add756ed68c1bac17916d4aadc8
- SHA1 c3f4c088be85bab9c81344223bcd7e0f36336877
- SHA512 64ca7904a72ebeb8c95fbd3477ad275c76dcfe13ea727cfde66f18764026b9571aec6ff9f89fb96efb19f34c51970660b355b54a201e5e6902f585d901185396
- TLSH T1DDD0230E160F36ED30F00500753C22421F470003CD4772EC3000F354764F10483044D5
- MD5 SHA1 SHA512 TLSH
start-Ravencoin-2Miners.bat
- SHA256 abe7ca15c546f2358017e7c1a9521699f432e1f254b84885d4803e8bc42a6375
- MD5 ef55350c3d462867d3d857ea9c030086
- SHA1 495f7631f631bb9caca0a39eeb51985de78fc2ca
- SHA512 d3d6fc7dbd06e094fbe9910a88b961469c8955d99d92b4687399fb9b33347ac0fed41ce90090d2b09c86865896a4338e715273d3eaa39b28c6a8fdd2f121ec1f
- TLSH T1E8D0A70A5A4A27AE62B206507A2D22426E570043CA5A76D83111F554754F18D96541C9
- MD5 SHA1 SHA512 TLSH
start-Ravencoin-Nanopool.bat
- SHA256 2bbaa73161ade160f0ad2c2b726d2a9ef1d00c02f2d4bd22d54fbb302e5602ba
- MD5 2e33e52cb36e2786910fe94296142d78
- SHA1 95dfa227d89694def1ab422bfc9c9b8f38fbc63e
- SHA512 d4cee5a2db905da12af8c749e3dd699c3210ae173929f39bddf2439439fc2a3c9ff6215955c3db5c7bdbfa9509cbe68f277355081c49f672cca8cb234bd26621
- TLSH T1F4D0972A550A1AF812B10A00763D22426F530083CA8233D83040E628390F08947801C9
- MD5 SHA1 SHA512 TLSH
start-Ravencoin-RavenMiner.bat
- SHA256 6ca4b5b587c12abd9abb41a1dfa5a13f104674ce1bc6e84e0574d94e5c4aad2d
- MD5 85c3f50b5d219495fc913e8b337ca735
- SHA1 d92e3258430d993bc8904f1c0b1682493ec89013
- SHA512 d80caf257befcf7905b0bf64d46c4537d3463bb94dc1b733fa13d308e0bf9fe423f5206bbf461e0e399084cd45c77d36249ab10dd48c7a955b25e2c180a33db2
- TLSH T154D0A70E160A27F9617506507A3D1242AE470183CA5672DC3111E515654B1C957941DA
- MD5 SHA1 SHA512 TLSH
start-Xelis-HeroMiners.bat
- SHA256 dd97b7055e5250d8b6daa02e341aa072311fafa2c5defbc9a45d1449cc6701fb
- MD5 cb3cd8cdcf2cb65433016daaa0d8f6ef
- SHA1 cbc24195071c6618a53e37d40388fd9920ea3c40
- SHA512 0944167ae6501b245019df7625920dee71c19e6c747ec52dea6ff9c520a7bdc87579cc7ee098b53b4a429e07ac4bb6193c5e6b32ad72b5f926b1a120d3de84cb
- TLSH T17BD0972B5A0E13FA22B44840393D3A022F8B4043CA8B76E83610E158704B18853401CE
- MD5 SHA1 SHA512 TLSH
start-Xelis-K1Pool.bat
- SHA256 693be76e43510d3830407ba8960757761737ab08813abc7aaf95c632f2a071d9
- MD5 4b5c4baedc77e26adeaadd4f68401d1e
- SHA1 4d115c69cbb06a82bfb342e7cfbfa73e0b989983
- SHA512 1f6ac34b4f201e70bcc24649b1b7bc0c90e8aafa7f81a7e0a2cb381c47d97a697a646515aed7dc04d3bf1774b9ca8f29d5e89d89f3cd947234fab43a0f065256
- TLSH T1F5D0972B164B02F822B99802393C22031FC70043DA4BB2E43001F618724F20883441CE
- MD5 SHA1 SHA512 TLSH
start-Xelis-Kryptex.bat
- SHA256 dfbeae5d966ea209cbf99702d613a004cdaff583fcf9343a847052a6e8019ba2
- MD5 18695731ba8e8db9cc0a010388087e67
- SHA1 2b21977104fdbc0ac8d5e23b4a6276880cc9225b
- SHA512 e6845a62c4e9f62932422187960201dc57e8215c9d8c7e246506dc090bc1a095e5babb32c0f52f28c784d43df1e5e9a9c5d57aafe764c8ae583f187d7470d691
- TLSH T14AD02337121F11FD20B40410363D37027F8F0003CA0732EC3144E9A4234710A43441CE
- MD5 SHA1 SHA512 TLSH
start-Zano-HeroMiners.bat
- SHA256 792b0fe97ea74ff59e3f528aa4d163a9b5b502e07f51dd8ae95596f34c08f8ed
- MD5 c9c082a85b5d279090c7ef1ca6665b92
- SHA1 7e78e4b00fe021eba8ce1be0acb9656fa47e74a4
- SHA512 e72086ccf81c921ea5ec112d84cbe196828e836b5eb18df1b6dd10f827ceb6b220d36f7a2986924665bdaf7628ca71726aef14a15f1c906c9ba272ee71d92899
- TLSH T100D0A7169A4A62FA60F108517A3D25025E8A0047D61776CC3965F51DB51A58953451CD
- MD5 SHA1 SHA512 TLSH
start-Zano-LuckyPool.bat
- SHA256 0fc9cf6950e3c9c3fcd9fb1c754803270bdded9d9d40e87436adcc5756fd8824
- MD5 25bdaa4dbc748d46a5bcc701311ccd61
- SHA1 294a4df137e800098dcc24b8fbc9287963e684f9
- SHA512 c68eb7d9c64073933f59b99d474c6aff64467adaed853a4ef15222b63f1c1528bdcc6e4b8e55dfa4907cae274c56153cc557534bf7392ccec26fc09113c0a742
- TLSH T15DD02329D14A61FE707054603F3E22032FC74043C92332CC3004E410B00F00943401C4
- MD5 SHA1 SHA512 TLSH
start-Zano-WoolyPooly.bat
- SHA256 4cf40d8673ec5e861a1e4a247ca64174f395aaedef1961cc11e70f08ba257b35
- MD5 0573ee1293251213ba156ef25851d209
- SHA1 8ad5f313384a24625c18adc0114d23fdd1523fdb
- SHA512 4dc552ea18642de1630fa55b2a371a22560cae959d5aa3a6b63a04f4589b0ebb9649769ca4556ea30adefcb0d86dbae56678079e3e4687d60db47d0c137ec56f
- TLSH T1D0D0222BE64AA5F960B50880393D2A436EDB01D3DE1A73ED3211D528A44F24A43991CE
- MD5 SHA1 SHA512 TLSH
wildrig-ng.exe
- SHA256 8bfd5549081b6c17525a6e753127ff2d47f0a84d9cac0d3287e1c11bfa805c39
- MD5 fa6a06e0f70273c3cf99719419c67837
- SHA1 af63c1a5fea9c06e46eb46913b7b991ce8cabdeb
- SHA512 0a2055be1bfe97ef5e6643cefc5ae44438b32d8a131b51ebb468109490be565464ef57ae030288a6b563986cb676b7fc02182d008534996c78baa099125da841
- SSDEEP 393216:QOh3tRkBc4pQMaSSU350DKT+1DVVzwp1:QObSc43SmsDUp1
- TLSH T146F602BC729844CDEEB56D3BDE26F52C4F113CA80062AA918D77734E5531D62232B72E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
84889040
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
Name
UKR0
Size
Virtual Size
67.7MB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
UKR1
Size
13.2MB
Virtual Size
13.2MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1.6MB
Virtual Size
1.6MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=199, id=261, version=33145,
count=25, id=260, version=33145,
count=17, id=259, version=33145,
count=17, id=260, version=35721,
count=12, id=259, version=35721,
count=104, id=261, version=35721,
count=2, id=123, version=2207,
count=210, id=1, productName=Unmarked objects,
count=11, id=257, version=33145,
count=78, id=260, version=36260,
count=404, id=261, version=36260,
count=1, id=255, version=36260,
count=1, id=258, version=36260,