Behavioral task
behavioral1
Sample
xmrig-6.22.0/start.bat
Resource
macos-20240711.1-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
xmrig-6.22.0/xmrig
Resource
macos-20240711.1-en
0 signatures
150 seconds
General
-
Target
xmrig-6.22.0.zip
-
Size
3.0MB
-
MD5
456a57930b2c2000af3e7b9f237849f6
-
SHA1
8ddb7283f3d2f8dd4fc15d0c57b07d1b347612b8
-
SHA256
ec18548e2ff4c5108f39cde701f33e9c4e477ba1fd9eb5a08f01d6468429e6f4
-
SHA512
60e93253230119b1f06585d20fcc39d8e281d7c3b88323be6fbabe19a38b6ec7e53b9b7e3b939defea2099eda38f768bda5ce9493e5e3d3ae49833648a6dea70
-
SSDEEP
49152:Bp6D+Wqa34hyIB4/cYP9a2ngLBEMKSZhk305/Wy6qwFU3TBSiSowbTukLg0nopin:f6Vqh3ORPFgLBEIhCYweg/HjLJuk
Malware Config
Signatures
-
XMRig Miner payload 2 IoCs
resource yara_rule static1/unpack001/xmrig-6.22.0/xmrig xmrig static1/unpack001/xmrig-6.22.0/xmrig family_xmrig -
Xmrig family
-
Embeds OpenSSL 1 IoCs
Embeds OpenSSL, may be used to circumvent TLS interception.
resource yara_rule static1/unpack001/xmrig-6.22.0/xmrig embeds_openssl
Files
-
xmrig-6.22.0.zip.zip
-
xmrig-6.22.0/SHA256SUMS
-
xmrig-6.22.0/config.json
-
xmrig-6.22.0/start.bat
-
xmrig-6.22.0/xmrig.macho macos arch:x64