General

  • Target

    493803af919beead7b0e3626df2a2387376feabdf0ddc8a380c3cb89ba313b83

  • Size

    8.3MB

  • MD5

    a71e6199066c457a10bf455f70eeae54

  • SHA1

    e92e616a3d7ad5ba89b51d4d081b17ccc59ed5f8

  • SHA256

    493803af919beead7b0e3626df2a2387376feabdf0ddc8a380c3cb89ba313b83

  • SHA512

    f7c8d980a0a3620b2f5ddd648fe4d912d5726a9c56ffe2a7e6e93a8a53d64fd9e4712bb695b0b924ca3dcc43b0647bca620e2bae3c2359e81a5487fef416ef02

  • SSDEEP

    196608:RDGAbzTG2IbeVQ9kbkRnN74HvjdSUw8v+nV2BpA8lOkbkzf1hdfJH:cAbzTzB+/wxg8vIoPwkbif1rJH

Score
10/10

Malware Config

Signatures

  • XMRig Miner Payload 2 IoCs
  • Xmrig family

Files

  • 493803af919beead7b0e3626df2a2387376feabdf0ddc8a380c3cb89ba313b83
    .gz
  • sample
    .tar
  • .rsync/a/a
    .sh linux
  • .rsync/a/anacron
    .elf linux x86
  • .rsync/a/cron
    .elf linux x64
  • .rsync/a/init0
    .sh linux
  • .rsync/a/run
    .sh linux
  • .rsync/a/stop
    .sh linux
  • .rsync/b/a
    .sh linux
  • .rsync/b/run
    .sh linux
  • .rsync/b/stop
    .sh linux
  • .rsync/c/go
    .sh linux
  • .rsync/c/golan
    .sh linux
  • .rsync/c/lib/32/libc.so.6
    .elf linux x86
  • .rsync/c/lib/32/libdl.so.2
    .elf linux x86
  • .rsync/c/lib/32/libnss_dns.so.2
    .elf linux x86
  • .rsync/c/lib/32/libnss_files.so.2
    .elf linux x86
  • .rsync/c/lib/32/libpthread.so.0
    .elf linux x86
  • .rsync/c/lib/32/libresolv-2.23.so
    .elf linux x86
  • .rsync/c/lib/32/libresolv.so.2
    .elf linux x86
  • .rsync/c/lib/32/tsm
    .elf linux x86
  • .rsync/c/lib/64/libc.so.6
    .elf linux x64
  • .rsync/c/lib/64/libdl.so.2
    .elf linux x64
  • .rsync/c/lib/64/libnss_dns.so.2
    .elf linux x64
  • .rsync/c/lib/64/libnss_files.so.2
    .elf linux x64
  • .rsync/c/lib/64/libpthread.so.0
    .elf linux x64
  • .rsync/c/lib/64/libresolv-2.23.so
    .elf linux x64
  • .rsync/c/lib/64/libresolv.so.2
    .elf linux x64
  • .rsync/c/lib/64/tsm
    .elf linux x64
  • .rsync/c/lib/arm/libarmmem-v7l.so
    .elf linux arm
  • .rsync/c/lib/arm/libc.so.6
    .elf linux arm
  • .rsync/c/lib/arm/libdl.so.2
    .elf linux arm
  • .rsync/c/lib/arm/libnss_dns.so.2
    .elf linux arm
  • .rsync/c/lib/arm/libpthread.so.0
    .elf linux arm
  • .rsync/c/lib/arm/libresolv.so
    .elf linux arm
  • .rsync/c/lib/arm/libresolv.so.2
    .elf linux arm
  • .rsync/c/lib/arm/tsm
    .elf linux arm
  • .rsync/c/run
    .sh linux
  • .rsync/c/slow
    .sh linux
  • .rsync/c/start
    .sh linux
  • .rsync/c/stop
    .sh linux
  • .rsync/c/tsm
    .sh linux
  • .rsync/c/tsm32
    .elf linux x86
  • .rsync/c/tsm64
    .elf linux x64
  • .rsync/c/tsmv7
    .elf linux arm
  • .rsync/c/watchdog
    .sh linux
  • .rsync/init
  • .rsync/init2
  • .rsync/initall
    .sh linux