General

  • Target

    2d6e2e1c77c80e8d0198ae76e7bb40db524f1e699211b554a126d20802f985f3

  • Size

    5.5MB

  • MD5

    ebb5653ed428da62c211718e717dec2c

  • SHA1

    d87965623bd1ddb35b1e10f2f4e098b0c8b39dc0

  • SHA256

    2d6e2e1c77c80e8d0198ae76e7bb40db524f1e699211b554a126d20802f985f3

  • SHA512

    fced87106b1bc8e42e8bf747e568d0f972b0fa47307c9d9b6713a51d7ac000c04af1302642548ac2437fdd220f9ec565e620b709178df91ef22f9ac31b238256

  • SSDEEP

    98304:IDSTOhnXSI0Wk5jG2nfBtkaeytFOfdpQM5PdUzyZbpmwXGM2qKSAFE225K/g+7+j:0XSxVJG2fLAqFOfT9sMYNM29SAFN25Ky

Score
10/10

Malware Config

Signatures

  • XMRig Miner Payload 2 IoCs
  • Xmrig family

Files

  • 2d6e2e1c77c80e8d0198ae76e7bb40db524f1e699211b554a126d20802f985f3
    .gz
  • sample
    .tar
  • .rsync/a/a
    .sh linux
  • .rsync/a/anacron
    .elf linux x86
  • .rsync/a/cron
    .elf linux x64
  • .rsync/a/init0
    .sh linux
  • .rsync/a/run
    .sh linux
  • .rsync/a/stop
    .sh linux
  • .rsync/b/a
    .sh linux
  • .rsync/b/run
    .sh linux
  • .rsync/b/stop
    .sh linux
  • .rsync/c/go
    .sh linux
  • .rsync/c/lib/32/libc.so.6
    .elf linux x86
  • .rsync/c/lib/32/libdl.so.2
    .elf linux x86
  • .rsync/c/lib/32/libnss_dns.so.2
    .elf linux x86
  • .rsync/c/lib/32/libnss_files.so.2
    .elf linux x86
  • .rsync/c/lib/32/libpthread.so.0
    .elf linux x86
  • .rsync/c/lib/32/libresolv-2.23.so
    .elf linux x86
  • .rsync/c/lib/32/libresolv.so.2
    .elf linux x86
  • .rsync/c/lib/32/tsm
    .elf linux x86
  • .rsync/c/lib/64/libc.so.6
    .elf linux x64
  • .rsync/c/lib/64/libdl.so.2
    .elf linux x64
  • .rsync/c/lib/64/libnss_dns.so.2
    .elf linux x64
  • .rsync/c/lib/64/libnss_files.so.2
    .elf linux x64
  • .rsync/c/lib/64/libpthread.so.0
    .elf linux x64
  • .rsync/c/lib/64/libresolv-2.23.so
    .elf linux x64
  • .rsync/c/lib/64/libresolv.so.2
    .elf linux x64
  • .rsync/c/lib/64/tsm
    .elf linux x64
  • .rsync/c/run
    .sh linux
  • .rsync/c/slow
    .sh linux
  • .rsync/c/start
    .sh linux
  • .rsync/c/stop
    .sh linux
  • .rsync/c/tsm
    .sh linux
  • .rsync/c/tsm32
    .elf linux x86
  • .rsync/c/tsm64
    .elf linux x64
  • .rsync/c/watchdog
    .sh linux
  • .rsync/init
  • .rsync/init2
  • .rsync/initall
    .sh linux