General

  • Target

    864533db99aade7897c872cffb6e991e166adb370bbad3c0ec969bf646d92dcc.elf

  • Size

    28KB

  • Sample

    240322-df1k7shg7x

  • MD5

    da93f99c9d6e98e69d2f6fb3558c1b74

  • SHA1

    e2ac9a127c3ff440eb8c45894da95e43b8bf3a18

  • SHA256

    864533db99aade7897c872cffb6e991e166adb370bbad3c0ec969bf646d92dcc

  • SHA512

    74dc76d011aa4c1087e6ce7483d8d4c4573a8815237622cf88863cfb3c6ac3f2278dbfbdbb2bba8dbcfdb9fdf315203cb5343e0088875ee7da2e8c38c9c0360e

  • SSDEEP

    384:McRvMLsiLPfToCQ667Buk3JWuxZ6MiV44vG7iC/PzpL59j2aI8yURza/2ml6AaJB:NRkLnT+I0JWnlV0isF1I8HazldyyGI8

Score
10/10

Malware Config

Targets

    • Target

      864533db99aade7897c872cffb6e991e166adb370bbad3c0ec969bf646d92dcc.elf

    • Size

      28KB

    • MD5

      da93f99c9d6e98e69d2f6fb3558c1b74

    • SHA1

      e2ac9a127c3ff440eb8c45894da95e43b8bf3a18

    • SHA256

      864533db99aade7897c872cffb6e991e166adb370bbad3c0ec969bf646d92dcc

    • SHA512

      74dc76d011aa4c1087e6ce7483d8d4c4573a8815237622cf88863cfb3c6ac3f2278dbfbdbb2bba8dbcfdb9fdf315203cb5343e0088875ee7da2e8c38c9c0360e

    • SSDEEP

      384:McRvMLsiLPfToCQ667Buk3JWuxZ6MiV44vG7iC/PzpL59j2aI8yURza/2ml6AaJB:NRkLnT+I0JWnlV0isF1I8HazldyyGI8

    Score
    10/10
    • XMRig Miner payload

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • Changes its process name

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

MITRE ATT&CK Enterprise v15

Tasks