General

  • Target

    a6517b97a4198317d83f0a13a9f6c90f3994cc1a19175dce6cf77afde30027bf

  • Size

    13.1MB

  • MD5

    f8d18f283781e796e3e9103d0695f588

  • SHA1

    a9f2b8121dcf7afa68938a63ef2707ef05b825c9

  • SHA256

    a6517b97a4198317d83f0a13a9f6c90f3994cc1a19175dce6cf77afde30027bf

  • SHA512

    8efb46d649f1f1d43f2f9a2a86b81b49d8a3701371815035a718ddf6257be401d70b95176c0ec23a2ed9b801edb8a5d5299937c51e2be541616c404062655248

  • SSDEEP

    196608:HXIFzJ/KdzVIPbbwbyTqYyK64rhNuOvF7fNAu:Qz1QzVIDsZ4rhNuo7u

Score
10/10

Malware Config

Signatures

  • XMRig Miner Payload 3 IoCs
  • Xmrig family

Files

  • a6517b97a4198317d83f0a13a9f6c90f3994cc1a19175dce6cf77afde30027bf
    .tar
  • .rsync/a/a
    .sh linux
  • .rsync/a/anacron
    .elf linux x86
  • .rsync/a/cron
    .elf linux x64
  • .rsync/a/init0
    .sh linux
  • .rsync/a/run
    .sh linux
  • .rsync/a/stop
    .sh linux
  • .rsync/b/a
    .sh linux
  • .rsync/b/run
    .sh linux
  • .rsync/b/stop
    .sh linux
  • .rsync/c/go
    .sh linux
  • .rsync/c/lib/32/libc.so.6
    .elf linux x86
  • .rsync/c/lib/32/libdl.so.2
    .elf linux x86
  • .rsync/c/lib/32/libnss_dns.so.2
    .elf linux x86
  • .rsync/c/lib/32/libnss_files.so.2
    .elf linux x86
  • .rsync/c/lib/32/libpthread.so.0
    .elf linux x86
  • .rsync/c/lib/32/libresolv-2.23.so
    .elf linux x86
  • .rsync/c/lib/32/libresolv.so.2
    .elf linux x86
  • .rsync/c/lib/32/tsm
    .elf linux x86
  • .rsync/c/lib/64/libc.so.6
    .elf linux x64
  • .rsync/c/lib/64/libdl.so.2
    .elf linux x64
  • .rsync/c/lib/64/libnss_dns.so.2
    .elf linux x64
  • .rsync/c/lib/64/libnss_files.so.2
    .elf linux x64
  • .rsync/c/lib/64/libpthread.so.0
    .elf linux x64
  • .rsync/c/lib/64/libresolv-2.23.so
    .elf linux x64
  • .rsync/c/lib/64/libresolv.so.2
    .elf linux x64
  • .rsync/c/lib/64/tsm
    .elf linux x64
  • .rsync/c/run
    .sh linux
  • .rsync/c/slow
    .sh linux
  • .rsync/c/start
    .sh linux
  • .rsync/c/stop
    .sh linux
  • .rsync/c/tsm
    .sh linux
  • .rsync/c/tsm32
    .elf linux x86
  • .rsync/c/tsm64
    .elf linux x64
  • .rsync/c/watchdog
    .sh linux
  • .rsync/init
  • .rsync/init2
  • .rsync/initall
    .sh linux