Overview

overview

10

Static

static

7

sh (1)

ubuntu-20.04-amd64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    sh (1)

  • Size

    2.6MB

  • Sample

    240423-srekfahc8w

  • MD5

    fd8121e312db46f3b1ac123fce2e73d1

  • SHA1

    431a7fdd2922cd3367035c20b9a507fdcb26431a

  • SHA256

    bc74f51442fe066967ced10f3037cd392153ccba5f03ff7e4c32e503363761e3

  • SHA512

    2498b3a9a205367d0d33791d084eee678c202c759629a66a6affcb63d604ba3c2c2e8ecaadadd08fc09b63c0abc9d978b8fdcc62fa7e989d9561f32b2fbb0ee8

  • SSDEEP

    49152:v6+s/nXTqdISJwVqstrpclhvpCr4tlZ22oMRktR2j2ctVSbD+KeZoozyeJikl/T9:v6+SDzVN1kmkw2hktYwfomwikBG4

Score
10/10
xmrig_linuxantivmlinuxminerupx

Malware Config

Targets

    • Target

      sh (1)

    • Size

      2.6MB

    • MD5

      fd8121e312db46f3b1ac123fce2e73d1

    • SHA1

      431a7fdd2922cd3367035c20b9a507fdcb26431a

    • SHA256

      bc74f51442fe066967ced10f3037cd392153ccba5f03ff7e4c32e503363761e3

    • SHA512

      2498b3a9a205367d0d33791d084eee678c202c759629a66a6affcb63d604ba3c2c2e8ecaadadd08fc09b63c0abc9d978b8fdcc62fa7e989d9561f32b2fbb0ee8

    • SSDEEP

      49152:v6+s/nXTqdISJwVqstrpclhvpCr4tlZ22oMRktR2j2ctVSbD+KeZoozyeJikl/T9:v6+SDzVN1kmkw2hktYwfomwikBG4

    Score
    10/10
    xmrig_linuxantivmminer

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig_linux

    • Checks hardware identifiers (DMI)

      Checks DMI information which indicate if the system is a virtual machine.

      antivm

    • Reads hardware information

      Accesses system info like serial numbers, manufacturer names etc.

    behavioral1

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

2
T1497

Credential Access

Discovery

Virtualization/Sandbox Evasion

2
T1497

System Information Discovery

3
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks