Resubmissions

03/09/2024, 21:32

240903-1dn6qayeqe 10

03/09/2024, 21:29

240903-1bzvfaxepm 10

General

  • Target

    xmrig-6.22.0.zip

  • Size

    3.0MB

  • MD5

    456a57930b2c2000af3e7b9f237849f6

  • SHA1

    8ddb7283f3d2f8dd4fc15d0c57b07d1b347612b8

  • SHA256

    ec18548e2ff4c5108f39cde701f33e9c4e477ba1fd9eb5a08f01d6468429e6f4

  • SHA512

    60e93253230119b1f06585d20fcc39d8e281d7c3b88323be6fbabe19a38b6ec7e53b9b7e3b939defea2099eda38f768bda5ce9493e5e3d3ae49833648a6dea70

  • SSDEEP

    49152:Bp6D+Wqa34hyIB4/cYP9a2ngLBEMKSZhk305/Wy6qwFU3TBSiSowbTukLg0nopin:f6Vqh3ORPFgLBEIhCYweg/HjLJuk

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 2 IoCs
  • Xmrig family
  • Embeds OpenSSL 1 IoCs

    Embeds OpenSSL, may be used to circumvent TLS interception.

Files

  • xmrig-6.22.0.zip
    .zip
  • xmrig-6.22.0/SHA256SUMS
  • xmrig-6.22.0/config.json
  • xmrig-6.22.0/start.bat
  • xmrig-6.22.0/xmrig
    .macho macos arch:x64