General

  • Target

    92c9c65d0e91d7e3aceb3dbec2cb214cc5a53f0040e0857b8f39a97f0a9adb80

  • Size

    11.8MB

  • MD5

    5093dec8be22901711646c74efd82361

  • SHA1

    a527acce7a016bf5bd209241712b579b0a6a7e5e

  • SHA256

    92c9c65d0e91d7e3aceb3dbec2cb214cc5a53f0040e0857b8f39a97f0a9adb80

  • SHA512

    ad560815a4fd79b25703b3fc41cc7d057cfedcd1202b46c9e1d2a9b1c6c932c02a49b6c0803700dc40d7e8d17c5c7f02182fcd207b8dc0c155ab9a1cfe78ac31

  • SSDEEP

    196608:lXI7zO/KdzVIPcbDbzeNt8pJLZrhNL5yCiJ:Az2QzVIEPiEZrhNL5k

Score
10/10

Malware Config

Signatures

  • XMRig Miner Payload 2 IoCs
  • Xmrig family

Files

  • 92c9c65d0e91d7e3aceb3dbec2cb214cc5a53f0040e0857b8f39a97f0a9adb80
    .tar
  • .rsync/a/a
    .sh linux
  • .rsync/a/cron.d
    .elf linux x64
  • .rsync/a/init0
    .sh linux
  • .rsync/a/run
    .sh linux
  • .rsync/a/stop
    .sh linux
  • .rsync/b/a
    .sh linux
  • .rsync/b/run
    .sh linux
  • .rsync/b/stop
    .sh linux
  • .rsync/c/go
    .sh linux
  • .rsync/c/golan
    .sh linux
  • .rsync/c/lib/32/libc.so.6
    .elf linux x86
  • .rsync/c/lib/32/libdl.so.2
    .elf linux x86
  • .rsync/c/lib/32/libnss_dns.so.2
    .elf linux x86
  • .rsync/c/lib/32/libnss_files.so.2
    .elf linux x86
  • .rsync/c/lib/32/libpthread.so.0
    .elf linux x86
  • .rsync/c/lib/32/libresolv-2.23.so
    .elf linux x86
  • .rsync/c/lib/32/libresolv.so.2
    .elf linux x86
  • .rsync/c/lib/32/tsm
    .elf linux x86
  • .rsync/c/lib/64/libc.so.6
    .elf linux x64
  • .rsync/c/lib/64/libdl.so.2
    .elf linux x64
  • .rsync/c/lib/64/libnss_dns.so.2
    .elf linux x64
  • .rsync/c/lib/64/libnss_files.so.2
    .elf linux x64
  • .rsync/c/lib/64/libpthread.so.0
    .elf linux x64
  • .rsync/c/lib/64/libresolv-2.23.so
    .elf linux x64
  • .rsync/c/lib/64/libresolv.so.2
    .elf linux x64
  • .rsync/c/lib/64/tsm
    .elf linux x64
  • .rsync/c/run
    .sh linux
  • .rsync/c/slow
    .sh linux
  • .rsync/c/start
    .sh linux
  • .rsync/c/stop
    .sh linux
  • .rsync/c/tsm
    .sh linux
  • .rsync/c/tsm32
    .elf linux x86
  • .rsync/c/tsm64
    .elf linux x64
  • .rsync/c/watchdog
    .sh linux
  • .rsync/init
  • .rsync/init2
  • .rsync/initall
    .sh linux