General

  • Target

    2aa70ecbd3733c39ed5648ca4d09570629ed564430f8e8cb4c6460aae0cad942

  • Size

    5.1MB

  • MD5

    7e2b4541e0ff720dd602c5bcafc3f944

  • SHA1

    74225541c4de4ea9142727bb5268924ae0d43f4d

  • SHA256

    2aa70ecbd3733c39ed5648ca4d09570629ed564430f8e8cb4c6460aae0cad942

  • SHA512

    7800690159d43012bfc030417f366c5fce80d5a36f596a4baf944bcd4d99ba472cd3d526d2230b178ba707a61acb1b2d7995724c75955860958f66fae513eb18

  • SSDEEP

    98304:ijn5JcAsHYqsnvqZ7hcHVSdkOFOMs6HVCjzrbXbe8gGjAuv2p5qzdVjVwQ+:KnD4Yqqvc7hvLFOMojzrbLVf2p5qzHjs

Score
10/10

Malware Config

Signatures

  • XMRig Miner Payload 1 IoCs
  • Xmrig family

Files

  • 2aa70ecbd3733c39ed5648ca4d09570629ed564430f8e8cb4c6460aae0cad942
    .gz
  • sample
    .tar
  • .rsync/a/a
    .sh linux
  • .rsync/a/cron.d
    .elf linux x64
  • .rsync/a/init0
    .sh linux
  • .rsync/a/run
    .sh linux
  • .rsync/a/stop
    .sh linux
  • .rsync/b/a
    .sh linux
  • .rsync/b/run
    .sh linux
  • .rsync/b/stop
    .sh linux
  • .rsync/c/go
    .sh linux
  • .rsync/c/golan
    .sh linux
  • .rsync/c/lib/32/libc.so.6
    .elf linux x86
  • .rsync/c/lib/32/libdl.so.2
    .elf linux x86
  • .rsync/c/lib/32/libnss_dns.so.2
    .elf linux x86
  • .rsync/c/lib/32/libnss_files.so.2
    .elf linux x86
  • .rsync/c/lib/32/libpthread.so.0
    .elf linux x86
  • .rsync/c/lib/32/libresolv-2.23.so
    .elf linux x86
  • .rsync/c/lib/32/libresolv.so.2
    .elf linux x86
  • .rsync/c/lib/32/tsm
    .elf linux x86
  • .rsync/c/lib/64/libc.so.6
    .elf linux x64
  • .rsync/c/lib/64/libdl.so.2
    .elf linux x64
  • .rsync/c/lib/64/libnss_dns.so.2
    .elf linux x64
  • .rsync/c/lib/64/libnss_files.so.2
    .elf linux x64
  • .rsync/c/lib/64/libpthread.so.0
    .elf linux x64
  • .rsync/c/lib/64/libresolv-2.23.so
    .elf linux x64
  • .rsync/c/lib/64/libresolv.so.2
    .elf linux x64
  • .rsync/c/lib/64/tsm
    .elf linux x64
  • .rsync/c/run
    .sh linux
  • .rsync/c/slow
    .sh linux
  • .rsync/c/start
    .sh linux
  • .rsync/c/stop
    .sh linux
  • .rsync/c/tsm
    .sh linux
  • .rsync/c/tsm32
    .elf linux x86
  • .rsync/c/tsm64
    .elf linux x64
  • .rsync/c/watchdog
    .sh linux
  • .rsync/init
  • .rsync/init2
  • .rsync/initall
    .sh linux