General

  • Target

    SecuriteInfo.com.FileRepMalware.5394.19333.elf

  • Size

    914KB

  • Sample

    240408-rvpzxaeg3x

  • MD5

    4297aecbb9d1e0f47b170c9f0eb1ef64

  • SHA1

    abc079d6bb7b25788c6808f2969d75aec68ab03a

  • SHA256

    632363e3e62b79515428d813ea9afc97b0dcc8c09c38f2cc11ef824da78b41f8

  • SHA512

    03f772cc1c0034f0c3954695dbcb88b712e8573dfc123ec5b48de6c5a42d889bb6957c0a8b4bac5c8f08695f2a02df3cb3231de1a96fc1f7dc20a0ff9f4ad064

  • SSDEEP

    12288:VBtpmDUY5cHJga/5k/sGjex6rni6ZKKmjyy8bkklOSC4gwnB:VBtpw5cHJgahk/sGjeErninXkk94gwB

Malware Config

Targets

    • Target

      SecuriteInfo.com.FileRepMalware.5394.19333.elf

    • Size

      914KB

    • MD5

      4297aecbb9d1e0f47b170c9f0eb1ef64

    • SHA1

      abc079d6bb7b25788c6808f2969d75aec68ab03a

    • SHA256

      632363e3e62b79515428d813ea9afc97b0dcc8c09c38f2cc11ef824da78b41f8

    • SHA512

      03f772cc1c0034f0c3954695dbcb88b712e8573dfc123ec5b48de6c5a42d889bb6957c0a8b4bac5c8f08695f2a02df3cb3231de1a96fc1f7dc20a0ff9f4ad064

    • SSDEEP

      12288:VBtpmDUY5cHJga/5k/sGjex6rni6ZKKmjyy8bkklOSC4gwnB:VBtpw5cHJgahk/sGjeErninXkk94gwB

    • XMRig Miner payload

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • Modifies systemd

      Adds/ modifies systemd service files. Likely to achieve persistence.

MITRE ATT&CK Enterprise v15

Tasks