Overview

overview

10

Static

static

10

dsm_sa_ip

ubuntu-18.04-amd64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    49ea49609a0ee0181ff98f033bf2565d631e632ef2a27ec7c422b83b4bfabb50
  • Size 3.3MB
  • Sample230815-gbrdhsba5v
  • SHA256 49ea49609a0ee0181ff98f033bf2565d631e632ef2a27ec7c422b83b4bfabb50
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
xmrigxmrig_linuxantivmlinuxminerrootkit

Malware Config

Targets

    • Target
      dsm_sa_ip
    • Size 8.4MB
    • SHA256 9e85eeee8ea44474affec898f2dd036e56ac034eb3f4eb5b6f633c25d6780ffd
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    xmrig_linuxantivmminerrootkit

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig_linux

    • Loads a kernel module

      Loads a Linux kernel module, potentially to achieve persistence

      rootkit

    • Checks CPU configuration

      Checks CPU information which indicate if the system is a virtual machine.

      antivm

    • Checks hardware identifiers (DMI)

      Checks DMI information which indicate if the system is a virtual machine.

      antivm

    • Reads CPU attributes

    • Reads hardware information

      Accesses system info like serial numbers, manufacturer names etc.

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks