Analysis
-
max time kernel
146s -
max time network
135s -
platform
linux_amd64 -
resource
ubuntu1804-amd64-en-20211208 -
resource tags
-
submitted
06-05-2023 06:46
General
-
Target
pwer
-
Size
1KB
-
MD5
997c9f285c57a5e808cbfed36443d23d
-
SHA1
f73a6d5d17c51abbd47674e4ca2dcfb4aadf735b
-
SHA256
a01a676d674665bfc15a5f593b135957f0585e9d16919ab25ae2103912072f89
-
SHA512
97ee4563f73534b0db8be042e7da6709a418fc8b494ece05028310adc287f7f389a344f8cb2011e48686ae084057855aa8414baa841dd1bcb620f7c3ce99773b
Score
10/10
Malware Config
Extracted
Family
metasploit
Version
encoder/shikata_ga_nai
Signatures
-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
-
XMRig Miner payload 2 IoCs
-
xmrig
XMRig is a high performance, open source, cross platform CPU/GPU miner.
-
Attempts to identify hypervisor via CPU configuration 1 TTPs 1 IoCs
Checks CPU information for indicators that the system is a virtual machine.
-
Creates/modifies Cron job 1 TTPs 5 IoCs
Cron allows running tasks on a schedule, and is commonly used for malware persistence.
-
Executes dropped EXE 9 IoCs