Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageKeyEncipherment
KeyUsageDataEncipherment
Overview
overview
10Static
static
10xmrig-6.22...el.bat
windows10-1703-x64
10xmrig-6.22...el.bat
windows10-2004-x64
10xmrig-6.22...el.bat
windows11-21h2-x64
10xmrig-6.22...el.bat
windows10-1703-x64
10xmrig-6.22...el.bat
windows10-2004-x64
10xmrig-6.22...el.bat
windows11-21h2-x64
10xmrig-6.22...el.bat
windows10-1703-x64
10xmrig-6.22...el.bat
windows10-2004-x64
10xmrig-6.22...el.bat
windows11-21h2-x64
10xmrig-6.22...el.bat
windows10-1703-x64
10xmrig-6.22...el.bat
windows10-2004-x64
10xmrig-6.22...el.bat
windows11-21h2-x64
10xmrig-6.22...el.bat
windows10-1703-x64
10xmrig-6.22...el.bat
windows10-2004-x64
10xmrig-6.22...el.bat
windows11-21h2-x64
10xmrig-6.22...el.bat
windows10-1703-x64
10xmrig-6.22...el.bat
windows10-2004-x64
10xmrig-6.22...el.bat
windows11-21h2-x64
1007-09-2024 23:10
240907-25rllatajb 1004-09-2024 06:26
240904-g7d33axbre 1004-09-2024 06:17
240904-g2cm2sxbma 1004-09-2024 06:04
240904-gswpkavhkn 1004-09-2024 00:45
240904-a4befa1fmq 1003-09-2024 22:52
240903-2tdwcszank 1003-09-2024 22:34
240903-2hc5paygln 1003-09-2024 10:59
240903-m3cx4awcne 1003-09-2024 10:39
240903-mp3xcswaka 1003-09-2024 10:37
240903-mnyk9athnj 10Behavioral task
behavioral1
Sample
xmrig-6.22.0-gcc-win64 plus/1Kryptex-ETC-Rigel.bat
Resource
win10-20240611-en
Behavioral task
behavioral2
Sample
xmrig-6.22.0-gcc-win64 plus/1Kryptex-ETC-Rigel.bat
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
xmrig-6.22.0-gcc-win64 plus/1Kryptex-ETC-Rigel.bat
Resource
win11-20240802-en
Behavioral task
behavioral4
Sample
xmrig-6.22.0-gcc-win64 plus/2Kryptex-ETC-Rigel.bat
Resource
win10-20240404-en
Behavioral task
behavioral5
Sample
xmrig-6.22.0-gcc-win64 plus/2Kryptex-ETC-Rigel.bat
Resource
win10v2004-20240802-en
Behavioral task
behavioral6
Sample
xmrig-6.22.0-gcc-win64 plus/2Kryptex-ETC-Rigel.bat
Resource
win11-20240802-en
Behavioral task
behavioral7
Sample
xmrig-6.22.0-gcc-win64 plus/3Kryptex-ETC-Rigel.bat
Resource
win10-20240404-en
Behavioral task
behavioral8
Sample
xmrig-6.22.0-gcc-win64 plus/3Kryptex-ETC-Rigel.bat
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
xmrig-6.22.0-gcc-win64 plus/3Kryptex-ETC-Rigel.bat
Resource
win11-20240802-en
Behavioral task
behavioral10
Sample
xmrig-6.22.0-gcc-win64 plus/4Kryptex-ETC-Rigel.bat
Resource
win10-20240404-en
Behavioral task
behavioral11
Sample
xmrig-6.22.0-gcc-win64 plus/4Kryptex-ETC-Rigel.bat
Resource
win10v2004-20240802-en
Behavioral task
behavioral12
Sample
xmrig-6.22.0-gcc-win64 plus/4Kryptex-ETC-Rigel.bat
Resource
win11-20240802-en
Behavioral task
behavioral13
Sample
xmrig-6.22.0-gcc-win64 plus/5Kryptex-ETC-Rigel.bat
Resource
win10-20240611-en
Behavioral task
behavioral14
Sample
xmrig-6.22.0-gcc-win64 plus/5Kryptex-ETC-Rigel.bat
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
xmrig-6.22.0-gcc-win64 plus/5Kryptex-ETC-Rigel.bat
Resource
win11-20240802-en
Behavioral task
behavioral16
Sample
xmrig-6.22.0-gcc-win64 plus/Kryptex-ETC-Rigel.bat
Resource
win10-20240404-en
Behavioral task
behavioral17
Sample
xmrig-6.22.0-gcc-win64 plus/Kryptex-ETC-Rigel.bat
Resource
win10v2004-20240802-en
Target
xmrig-6.22.0-gcc-win64 plus.zip
Size
3.7MB
MD5
ea0408666018f39ac93eb963e56ab9c2
SHA1
c9c8f339225219c9fbb8e5b0f01bc1cb49de5205
SHA256
ed4b133ca27cb6ae60400d9b9a012bbe8030f4a7e15f7b44018e16f1dedf415f
SHA512
8a243f76483544b8bef9098d844768989e81f713901d56f11ab1ac7d84ba61fea290a8ab1120061f443ba4fa7dcbfec4d4bb5c87aad91d72bd47de9eff375d94
SSDEEP
98304:HsvYBDD+sOg66q67bDp51+re1aAA717SmESMy7dglIuJG3G:Q0DKPg6i7bP1eSA71eRSMy7qIuk2
resource | yara_rule |
---|---|
static1/unpack001/xmrig-6.22.0-gcc-win64 plus/xmrig.exe | xmrig |
static1/unpack001/xmrig-6.22.0-gcc-win64 plus/xmrig.exe | family_xmrig |
Checks for missing Authenticode signature.
resource |
---|
unpack001/xmrig-6.22.0-gcc-win64 plus/xmrig.exe |
KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageKeyEncipherment
KeyUsageDataEncipherment
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
d:\hotproject\winring0\source\dll\sys\lib\amd64\WinRing0.pdb
IoDeleteSymbolicLink
RtlInitUnicodeString
IoDeleteDevice
IoCreateDevice
MmMapIoSpace
KeBugCheckEx
IoCreateSymbolicLink
MmUnmapIoSpace
IofCompleteRequest
__C_specific_handler
HalSetBusDataByOffset
HalGetBusDataByOffset
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
AdjustTokenPrivileges
AllocateAndInitializeSid
CloseServiceHandle
ControlService
CreateServiceW
CryptAcquireContextW
CryptCreateHash
CryptDecrypt
CryptDestroyHash
CryptDestroyKey
CryptEnumProvidersW
CryptExportKey
CryptGenRandom
CryptGetProvParam
CryptGetUserKey
CryptReleaseContext
CryptSetHashParam
CryptSignHashW
DeleteService
DeregisterEventSource
FreeSid
GetSecurityInfo
GetTokenInformation
GetUserNameW
LookupPrivilegeValueW
LsaAddAccountRights
LsaClose
LsaOpenPolicy
OpenProcessToken
OpenSCManagerW
OpenServiceW
QueryServiceConfigA
QueryServiceStatus
RegCloseKey
RegGetValueW
RegOpenKeyExW
RegQueryValueExW
RegisterEventSourceW
ReportEventW
SetEntriesInAclA
SetSecurityInfo
StartServiceW
SystemFunction036
CertCloseStore
CertDuplicateCertificateContext
CertEnumCertificatesInStore
CertFindCertificateInStore
CertFreeCertificateContext
CertGetCertificateContextProperty
CertOpenStore
MiniDumpWriteDump
SymGetOptions
SymSetOptions
ConvertInterfaceIndexToLuid
ConvertInterfaceLuidToNameW
GetAdaptersAddresses
AcquireSRWLockExclusive
AcquireSRWLockShared
AddVectoredExceptionHandler
AssignProcessToJobObject
CancelIo
CancelIoEx
CancelSynchronousIo
CloseHandle
ConnectNamedPipe
ConvertFiberToThread
ConvertThreadToFiberEx
CopyFileW
CreateDirectoryW
CreateEventA
CreateFiberEx
CreateFileA
CreateFileMappingA
CreateFileW
CreateHardLinkW
CreateIoCompletionPort
CreateJobObjectW
CreateNamedPipeA
CreateNamedPipeW
CreateProcessW
CreateSemaphoreA
CreateSymbolicLinkW
CreateToolhelp32Snapshot
DebugBreak
DeleteCriticalSection
DeleteFiber
DeviceIoControl
DuplicateHandle
EnterCriticalSection
ExpandEnvironmentStringsA
FileTimeToSystemTime
FillConsoleOutputAttribute
FillConsoleOutputCharacterW
FindClose
FindFirstFileW
FindNextFileW
FindResourceW
FlushFileBuffers
FlushInstructionCache
FlushViewOfFile
FormatMessageA
FormatMessageW
FreeConsole
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetComputerNameA
GetConsoleCursorInfo
GetConsoleMode
GetConsoleScreenBufferInfo
GetConsoleTitleW
GetConsoleWindow
GetCurrentDirectoryW
GetCurrentProcess
GetCurrentProcessId
GetCurrentProcessorNumber
GetCurrentThread
GetCurrentThreadId
GetDiskFreeSpaceW
GetEnvironmentStringsW
GetEnvironmentVariableW
GetExitCodeProcess
GetFileAttributesA
GetFileAttributesW
GetFileInformationByHandle
GetFileInformationByHandleEx
GetFileSizeEx
GetFileType
GetFinalPathNameByHandleW
GetFullPathNameW
GetHandleInformation
GetLargePageMinimum
GetLastError
GetLongPathNameW
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleExW
GetModuleHandleW
GetNamedPipeClientProcessId
GetNamedPipeHandleStateA
GetNamedPipeServerProcessId
GetNativeSystemInfo
GetNumberOfConsoleInputEvents
GetPriorityClass
GetProcAddress
GetProcessAffinityMask
GetProcessHeap
GetProcessId
GetProcessIoCounters
GetProcessTimes
GetQueuedCompletionStatus
GetShortPathNameW
GetStartupInfoW
GetStdHandle
GetSystemDirectoryA
GetSystemFirmwareTable
GetSystemInfo
GetSystemPowerStatus
GetSystemTime
GetSystemTimeAdjustment
GetSystemTimeAsFileTime
GetSystemTimePreciseAsFileTime
GetTempPathW
GetThreadContext
GetThreadPriority
GetThreadTimes
GetTickCount
GetTickCount64
GetVersion
GetVersionExA
GetVersionExW
GlobalMemoryStatusEx
HeapAlloc
HeapFree
InitializeConditionVariable
InitializeCriticalSection
InitializeSRWLock
IsDBCSLeadByteEx
IsDebuggerPresent
IsProcessorFeaturePresent
K32GetModuleBaseNameW
K32GetProcessMemoryInfo
LCMapStringW
LeaveCriticalSection
LoadLibraryA
LoadLibraryExA
LoadLibraryExW
LoadLibraryW
LoadResource
LocalAlloc
LocalFree
LockResource
MapViewOfFile
MoveFileExW
MultiByteToWideChar
NeedCurrentDirectoryForExePathW
OpenProcess
OutputDebugStringA
PeekNamedPipe
PostQueuedCompletionStatus
Process32First
Process32Next
QueryPerformanceCounter
QueryPerformanceFrequency
QueueUserWorkItem
RaiseException
ReOpenFile
ReadConsoleA
ReadConsoleInputW
ReadConsoleW
ReadDirectoryChangesW
ReadFile
RegisterWaitForSingleObject
ReleaseSRWLockExclusive
ReleaseSRWLockShared
ReleaseSemaphore
RemoveDirectoryW
ResetEvent
ResumeThread
RtlCaptureContext
RtlLookupFunctionEntry
RtlUnwindEx
RtlVirtualUnwind
SetConsoleCtrlHandler
SetConsoleCursorInfo
SetConsoleCursorPosition
SetConsoleMode
SetConsoleTextAttribute
SetConsoleTitleA
SetConsoleTitleW
SetCurrentDirectoryW
SetEnvironmentVariableW
SetErrorMode
SetEvent
SetFileCompletionNotificationModes
SetFileInformationByHandle
SetFilePointerEx
SetFileTime
SetHandleInformation
SetInformationJobObject
SetLastError
SetNamedPipeHandleState
SetPriorityClass
SetProcessAffinityMask
SetSystemTime
SetThreadAffinityMask
SetThreadContext
SetThreadPriority
SetUnhandledExceptionFilter
SizeofResource
Sleep
SleepConditionVariableCS
SuspendThread
SwitchToFiber
SwitchToThread
SystemTimeToFileTime
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
TryAcquireSRWLockExclusive
TryAcquireSRWLockShared
TryEnterCriticalSection
UnmapViewOfFile
UnregisterWait
UnregisterWaitEx
VirtualAlloc
VirtualFree
VirtualLock
VirtualProtect
VirtualQuery
WaitForMultipleObjects
WaitForSingleObject
WaitNamedPipeW
WakeAllConditionVariable
WakeConditionVariable
WideCharToMultiByte
WriteConsoleInputW
WriteConsoleW
WriteFile
__C_specific_handler
___lc_codepage_func
___mb_cur_max_func
__argv
__doserrno
__getmainargs
__initenv
__iob_func
__set_app_type
__setusermatherr
_amsg_exit
_assert
_beginthreadex
_cexit
_close
_commode
_endthreadex
_errno
_exit
_fileno
_fdopen
_fileno
_findclose
_findfirst64
_findnext64
_fmode
_fstat64
_fullpath
_get_osfhandle
_gmtime64
_initterm
_isatty
_localtime64
_lock
_lseeki64
_mkdir
_onexit
_open
_open_osfhandle
_read
_setjmp
_setmode
_snwprintf
_snwprintf_s
_stat64
_strdup
_strdup
_stricmp
_strnicmp
_strtoi64
_strtoui64
_time64
_umask
_unlock
_vscprintf
_vsnprintf
_vsnwprintf
_wchmod
_wcsdup
_wcsnicmp
_wcsrev
_wfopen
_wopen
_write
_write
_wrmdir
abort
atof
atoi
calloc
exit
fclose
feof
ferror
fflush
fgets
fopen
fprintf
fputc
fputs
fread
free
fseek
ftell
fwrite
getc
getenv
isspace
iswctype
isxdigit
localeconv
longjmp
malloc
memchr
memcmp
memcpy
memmove
memset
printf
qsort
raise
rand
realloc
setlocale
setvbuf
signal
sprintf
srand
strcat
strchr
strcmp
strcoll
strcpy
strcspn
strerror
strftime
strlen
strncmp
strncpy
strrchr
strspn
strstr
strtol
strtoul
strxfrm
tolower
toupper
towlower
towupper
ungetc
vfprintf
wcschr
wcscmp
wcscoll
wcscpy
wcsftime
wcslen
wcsncmp
wcsncpy
wcspbrk
wcsrchr
wcsstr
wcstombs
wcsxfrm
CoCreateInstance
CoInitializeEx
CoTaskMemFree
CoUninitialize
SHGetKnownFolderPath
SHGetSpecialFolderPathA
DispatchMessageA
GetLastInputInfo
GetMessageA
GetProcessWindowStation
GetSystemMetrics
GetUserObjectInformationW
MapVirtualKeyW
MessageBoxW
ShowWindow
TranslateMessage
GetUserProfileDirectoryW
FreeAddrInfoW
GetAddrInfoW
WSACleanup
WSADuplicateSocketW
WSAGetLastError
WSAGetOverlappedResult
WSAIoctl
WSARecv
WSARecvFrom
WSASend
WSASendTo
WSASetLastError
WSASocketW
WSAStartup
accept
bind
closesocket
connect
gethostbyaddr
gethostbyname
gethostname
getpeername
getservbyname
getservbyport
getsockname
getsockopt
htonl
htons
inet_addr
inet_ntoa
ioctlsocket
listen
ntohs
recv
select
send
setsockopt
shutdown
socket
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ