xmrig

General

Target
linu1x.sh
Size 764B
Sample231020-rdeslscc41
SHA256 3959bccb7cd46089cbfdb5009142d90ec7dde24accadc182f883c0f9eabae70c
MD5 daf5a778f4bb100c1b207d3768e7caeb
SHA1 1a8a575d9453c32fdb89f2cc1e0633acf6d51dd9
SHA512 1522e190d86e60a99cb03bf5d86b625d158a4ec3e12dd099ea313050e66bc6cc878f6c847aafca7f2409150a867631f38339c6213b004bf7cb6ae4e6db5c2635
MD5 SHA1 SHA512

Score

10^/10

Malware Config

Targets

- Target
  linu1x.sh
- Size 764B
- SHA256 3959bccb7cd46089cbfdb5009142d90ec7dde24accadc182f883c0f9eabae70c
- MD5 daf5a778f4bb100c1b207d3768e7caeb
- SHA1 1a8a575d9453c32fdb89f2cc1e0633acf6d51dd9
- SHA512 1522e190d86e60a99cb03bf5d86b625d158a4ec3e12dd099ea313050e66bc6cc878f6c847aafca7f2409150a867631f38339c6213b004bf7cb6ae4e6db5c2635
- MD5 SHA1 SHA512
Score

10^/10

xmrig antivm miner xmrig_linux
- XMRig Miner payload
  miner
- xmrig
  XMRig is a high performance, open source, cross platform CPU/GPU miner.
  miner xmrig
- Executes dropped EXE
- Checks CPU configuration
  Checks CPU information which indicate if the system is a virtual machine.
  antivm
- Checks hardware identifiers (DMI)
  Checks DMI information which indicate if the system is a virtual machine.
  antivm
- Reads CPU attributes
- Reads hardware information
  Accesses system info like serial numbers, manufacturer names etc.
behavioral1 behavioral2 behavioral3 behavioral4

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

2

T1497

Credential Access

Discovery

System Information Discovery

3

T1082

Virtualization/Sandbox Evasion

2

T1497

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

XMRig Miner payload

Executes dropped EXE

Checks CPU configuration

Checks hardware identifiers (DMI)

Reads CPU attributes

Reads hardware information

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4