General

  • Target

    sh

  • Size

    2.2MB

  • Sample

    240604-ex4jvsde47

  • MD5

    99469381a6c59dec28e32519401f7d85

  • SHA1

    3b15039f19219260adf6d79a4c76d25c3224bb1f

  • SHA256

    4d47504db2f3fe6e2afeb25ae3d4d8efd85d77651a5005ce715f4058cc46ef29

  • SHA512

    2610e95501c498816411638b6b5163e1fdfb7243a613ddeb54954d86ba1aac1eb4b7c5a9e7c85c562ef821eabe95e29b353a19ae3795ebe278e2fb9f2d50d6a3

  • SSDEEP

    49152:Uu0quOoMo+Yw+DEAMjjEW1Ky4WbHIPbxCrQaRPeY36BK7OPm:B0q4M8/McZll0EaRPeYKBK7t

Malware Config

Targets

    • Target

      sh

    • Size

      2.2MB

    • MD5

      99469381a6c59dec28e32519401f7d85

    • SHA1

      3b15039f19219260adf6d79a4c76d25c3224bb1f

    • SHA256

      4d47504db2f3fe6e2afeb25ae3d4d8efd85d77651a5005ce715f4058cc46ef29

    • SHA512

      2610e95501c498816411638b6b5163e1fdfb7243a613ddeb54954d86ba1aac1eb4b7c5a9e7c85c562ef821eabe95e29b353a19ae3795ebe278e2fb9f2d50d6a3

    • SSDEEP

      49152:Uu0quOoMo+Yw+DEAMjjEW1Ky4WbHIPbxCrQaRPeY36BK7OPm:B0q4M8/McZll0EaRPeYKBK7t

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Checks hardware identifiers (DMI)

      Checks DMI information which indicate if the system is a virtual machine.

    • Reads hardware information

      Accesses system info like serial numbers, manufacturer names etc.

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Virtualization/Sandbox Evasion

2
T1497

Discovery

Virtualization/Sandbox Evasion

2
T1497

System Information Discovery

3
T1082

Tasks