xmrig.exe
First submission 2024-09-22 21:29:08
Last sumbission 2024-10-15 17:59:07
File details
| File type: | PE32+ executable (console) x86-64 (stripped to external PDB), for MS Windows |
| Mime type: | application/x-dosexec |
| File size: | 2913.5 KB (2983424 bytes) |
| Compile time: | 2024-08-11 20:18:04 |
| MD5: | 43f595460b2fca77561c63e8a80178dd |
| SHA1: | ce644189a561c6a2a6f6f6656fc6a46e006d1d87 |
| SHA256: | 7dc50338d476cd0dfdfcf48dc7dbff682d6d04458c6ce2808f35779606576532 |
| Import Hash : | 17fb7e76da9d0e277bd22cf9f3d5242c |
| Sections 3 | UPX0 UPX1 .rsrc |
| Directories 4 | import resource tls relocation |
File features detected
Is DLL
Packers
Anti Debug
Anti VM
Signed
XOR
OSINT Enrichments
| Virus Total: | 52/77 VT report date: 2024-09-21 11:56:46 |
| Malware Type 3 | miner pua trojan |
| Threat Type 2 | xmrig ib24 |
URLs, FQDN and IP indicators 1
| URL | Host (FQDN/IP) | Date Added |
|---|---|---|
hXXp://209.141.51.21/xmrig.exe  |
209.141.51.21 |
2024-10-15 17:59:11 |
PE Sections 2 suspicious
| Name | VAddress | VSize | Size | SHA1 | MD5 | Suspicious |
|---|---|---|---|---|---|---|
| UPX0 | 0x1000 | 0x969000 | 0 | da39a3ee5e6b4b0d3255bfef95601890afd80709 | d41d8cd98f00b204e9800998ecf8427e | |
| UPX1 | 0x96a000 | 0x2d3000 | 2957824 | 1cfc87e070b6fe19a1741cb234baf884ab46ce04 | 79818e13c8fe33436eed719f15dd3e73 | |
| .rsrc | 0xc3d000 | 0x7000 | 25088 | f75599eb8b3b7d5f178fa64ebba1643a88f1c9dd | e9083890ed2a3b1f86a59ae5bebb0a4f |
PE Resources 4
| Name | Language | Sublanguage | Offset | Size | Data |
|---|---|---|---|---|---|
| RT_ICON | LANG_ENGLISH | SUBLANG_ENGLISH_US | 0xc4211c | 1128 | |
| RT_GROUP_ICON | LANG_ENGLISH | SUBLANG_ENGLISH_US | 0xc42588 | 62 | |
| RT_VERSION | LANG_ENGLISH | SUBLANG_ENGLISH_US | 0xc425cc | 652 | |
| RT_MANIFEST | LANG_NEUTRAL | SUBLANG_NEUTRAL | 0xc4285c | 1167 |
Meta infos 8
| LegalCopyright: | Copyright (C) 2016-2024 xmrig.com |
| ProductVersion: | 6.22.0 |
| CompanyName: | www.xmrig.com |
| FileVersion: | 6.22.0 |
| FileDescription: | XMRig miner |
| Translation: | 0x0000 0x04b0 |
| OriginalFilename: | xmrig.exe |
| ProductName: | XMRig |
Strings analysis - File found
| Library |
| ADVAPI32.dll |
| dbghelp.dll |
| USER32.dll |
| KERNEL32.dll |
| IPHLPAPI.DLL |
| SHELL32.dll |
| MSVCRT.dll |
| ole32.dll |
| Crypt32.dll |
| USERENV.dll |
| WS2_32.dll |