General

  • Target

    4386e2b5be28c6e7c352a33fd8c2274c2e9b2347d18dfd426912d1dc176492e3

  • Size

    19.2MB

  • MD5

    57594763b47086e063255bbf05fd4af5

  • SHA1

    717230b7c3a3a137cd93ba1f618534a15db49bbd

  • SHA256

    4386e2b5be28c6e7c352a33fd8c2274c2e9b2347d18dfd426912d1dc176492e3

  • SHA512

    a5fce5a25fabed38fea02a51f148a29151ca473632512952af61dbefa837a83554f8739820bc94f27d6540d81c5272a7a643d187c3de9d8393efe4faff7ed2dc

  • SSDEEP

    196608:tXIFz3/KdzVIPxbgb+BgxetbYb0z5ehgKDerhNl510WrhNcrm3XKk5dW0L/tG:GzPQzVI5EfzZgHrhNOWrhNX3ap0

Score
10/10

Malware Config

Signatures

  • XMRig Miner Payload 3 IoCs
  • Xmrig family

Files

  • 4386e2b5be28c6e7c352a33fd8c2274c2e9b2347d18dfd426912d1dc176492e3
    .tar
  • .rsync/a/a
    .sh linux
  • .rsync/a/anacron
    .elf linux x86
  • .rsync/a/cron
    .elf linux x64
  • .rsync/a/init0
    .sh linux
  • .rsync/a/run
    .sh linux
  • .rsync/a/stop
    .sh linux
  • .rsync/b/a
    .sh linux
  • .rsync/b/run
    .sh linux
  • .rsync/b/stop
    .sh linux
  • .rsync/c/go
    .sh linux
  • .rsync/c/golan
    .sh linux
  • .rsync/c/lib/32/libc.so.6
    .elf linux x86
  • .rsync/c/lib/32/libdl.so.2
    .elf linux x86
  • .rsync/c/lib/32/libnss_dns.so.2
    .elf linux x86
  • .rsync/c/lib/32/libnss_files.so.2
    .elf linux x86
  • .rsync/c/lib/32/libpthread.so.0
    .elf linux x86
  • .rsync/c/lib/32/libresolv-2.23.so
    .elf linux x86
  • .rsync/c/lib/32/libresolv.so.2
    .elf linux x86
  • .rsync/c/lib/32/tsm
    .elf linux x86
  • .rsync/c/lib/64/libc.so.6
    .elf linux x64
  • .rsync/c/lib/64/libdl.so.2
    .elf linux x64
  • .rsync/c/lib/64/libnss_dns.so.2
    .elf linux x64
  • .rsync/c/lib/64/libnss_files.so.2
    .elf linux x64
  • .rsync/c/lib/64/libpthread.so.0
    .elf linux x64
  • .rsync/c/lib/64/libresolv-2.23.so
    .elf linux x64
  • .rsync/c/lib/64/libresolv.so.2
    .elf linux x64
  • .rsync/c/lib/64/tsm
    .elf linux x64
  • .rsync/c/lib/arm/libarmmem-v7l.so
    .elf linux arm
  • .rsync/c/lib/arm/libc.so.6
    .elf linux arm
  • .rsync/c/lib/arm/libdl.so.2
    .elf linux arm
  • .rsync/c/lib/arm/libnss_dns.so.2
    .elf linux arm
  • .rsync/c/lib/arm/libpthread.so.0
    .elf linux arm
  • .rsync/c/lib/arm/libresolv.so
    .elf linux arm
  • .rsync/c/lib/arm/libresolv.so.2
    .elf linux arm
  • .rsync/c/lib/arm/tsm
    .elf linux arm
  • .rsync/c/run
    .sh linux
  • .rsync/c/slow
    .sh linux
  • .rsync/c/start
    .sh linux
  • .rsync/c/stop
    .sh linux
  • .rsync/c/tsm
    .sh linux
  • .rsync/c/tsm32
    .elf linux x86
  • .rsync/c/tsm64
    .elf linux x64
  • .rsync/c/tsmv7
    .elf linux arm
  • .rsync/c/watchdog
    .sh linux
  • .rsync/init
  • .rsync/init2
  • .rsync/initall
    .sh linux