General

  • Target

    0aa920ecef233dce94895ad1e258fa70855fbac8596d862e9a8266bb600c2a78

  • Size

    32KB

  • Sample

    240509-hae5jahc78

  • MD5

    2aee6dc8e5f8a6aeef78bd93cdbcd9b4

  • SHA1

    98e3b6ce5b05a97a2b6c77a88f61f1a1f3d891f4

  • SHA256

    0aa920ecef233dce94895ad1e258fa70855fbac8596d862e9a8266bb600c2a78

  • SHA512

    de16183d16974d531fb123fb1c4065b7668cd554cf6ef48588d970e0562440164b9bc55dbe64c424ebf5798c2513d75d6dcaf8fa72d5ffa902ec7c7202e71531

  • SSDEEP

    768:Dycp0iv+wlXrvIH+tBl+fnN5FRS2R/tX/NU38QV:m5ANmH+tB47DnRha38QV

Malware Config

Targets

    • Target

      0aa920ecef233dce94895ad1e258fa70855fbac8596d862e9a8266bb600c2a78

    • Size

      32KB

    • MD5

      2aee6dc8e5f8a6aeef78bd93cdbcd9b4

    • SHA1

      98e3b6ce5b05a97a2b6c77a88f61f1a1f3d891f4

    • SHA256

      0aa920ecef233dce94895ad1e258fa70855fbac8596d862e9a8266bb600c2a78

    • SHA512

      de16183d16974d531fb123fb1c4065b7668cd554cf6ef48588d970e0562440164b9bc55dbe64c424ebf5798c2513d75d6dcaf8fa72d5ffa902ec7c7202e71531

    • SSDEEP

      768:Dycp0iv+wlXrvIH+tBl+fnN5FRS2R/tX/NU38QV:m5ANmH+tB47DnRha38QV

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • Deletes system logs

      Deletes log file which contains global system messages. Adversaries may delete system logs to minimize their footprint.

    • Loads a kernel module

      Loads a Linux kernel module, potentially to achieve persistence

    • Deletes log files

      Deletes log files on the system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Reads list of loaded kernel modules

      Reads the list of currently loaded kernel modules, possibly to detect virtual environments.

MITRE ATT&CK Enterprise v15

Tasks