Analysis

  • max time kernel
    0s
  • max time network
    483s
  • platform
    ubuntu-18.04_amd64
  • resource
    ubuntu1804-amd64-20240226-en
  • resource tags

    arch:amd64arch:i386image:ubuntu1804-amd64-20240226-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
  • submitted
    28-03-2024 07:09

General

  • Target

    ___

  • Size

    6.7MB

  • MD5

    73fd05d9d3fe27957fff3b176f0ab6e9

  • SHA1

    ab6a50a4baabc319d52d8d5dd8f7b099db884aa0

  • SHA256

    c7de9799873b353f2fec6a490ed1d4062340eddda623afa0ba8798aca7ced31d

  • SHA512

    07c9387e4cfb186dcff9234b38a5ef4bc63598200c2e0dee1dfff79d87cd0b52721f6aafe0848265ff96eb908ff7ccb66d13bdfde010ffb4fbeee079d006a926

  • SSDEEP

    196608:nm3gGspZ1DUTzjIOWBwYPyF95i4Gu5tX9Wj:nm36mtX9Wj

Malware Config

Signatures

  • xmrig

    XMRig is a high performance, open source, cross platform CPU/GPU miner.

  • Checks CPU configuration 1 TTPs 1 IoCs

    Checks CPU information which indicate if the system is a virtual machine.

  • Checks hardware identifiers (DMI) 1 TTPs 4 IoCs

    Checks DMI information which indicate if the system is a virtual machine.

  • Reads CPU attributes 1 TTPs 45 IoCs
  • Reads hardware information 1 TTPs 14 IoCs

    Accesses system info like serial numbers, manufacturer names etc.

  • Enumerates kernel/hardware configuration 1 TTPs 19 IoCs

    Reads contents of /sys virtual filesystem to enumerate system information.

  • Reads runtime system information 4 IoCs

    Reads data from /proc virtual filesystem.

Processes

  • /tmp/___
    /tmp/___
    1⤵
    • Checks CPU configuration
    • Checks hardware identifiers (DMI)
    • Reads CPU attributes
    • Reads hardware information
    • Enumerates kernel/hardware configuration
    • Reads runtime system information
    PID:1593

Network

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Virtualization/Sandbox Evasion

2
T1497

Discovery

Virtualization/Sandbox Evasion

2
T1497

System Information Discovery

3
T1082

Replay Monitor

Loading Replay Monitor...

Downloads