General

  • Target

    SecuriteInfo.com.Possible_SMMODUPXA.16390.11100.elf

  • Size

    28KB

  • Sample

    240306-pp2qeaag31

  • MD5

    81959aa15f618e7f878587c3fbee558f

  • SHA1

    63f4ff2f4e073f771f3360a97a91d83cb7f397a7

  • SHA256

    884107422df524c5d7584f267910c4d738fa09187a6f835374038ed27c2a4fc8

  • SHA512

    1cb22d5f938921717cc8ed77bb9fc3250a85e7256ae26c7503e2890d434e9bf4b559708f32cab301b482825c8ca86ce5b60b3b9b45700334537d5f12c9cc64b0

  • SSDEEP

    768:Z0TF6I/0OdgyoCJSqeYCU7hWdj8qFCT5FL9GI0:ZwH8O67CCg7YdAMCTe

Score
10/10

Malware Config

Targets

    • Target

      SecuriteInfo.com.Possible_SMMODUPXA.16390.11100.elf

    • Size

      28KB

    • MD5

      81959aa15f618e7f878587c3fbee558f

    • SHA1

      63f4ff2f4e073f771f3360a97a91d83cb7f397a7

    • SHA256

      884107422df524c5d7584f267910c4d738fa09187a6f835374038ed27c2a4fc8

    • SHA512

      1cb22d5f938921717cc8ed77bb9fc3250a85e7256ae26c7503e2890d434e9bf4b559708f32cab301b482825c8ca86ce5b60b3b9b45700334537d5f12c9cc64b0

    • SSDEEP

      768:Z0TF6I/0OdgyoCJSqeYCU7hWdj8qFCT5FL9GI0:ZwH8O67CCg7YdAMCTe

    Score
    10/10
    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • Changes its process name

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

MITRE ATT&CK Enterprise v15

Tasks