Analysis

  • max time kernel
    133s
  • max time network
    130s
  • platform
    ubuntu-22.04_amd64
  • resource
    ubuntu2204-amd64-20240611-en
  • resource tags

    arch:amd64arch:i386image:ubuntu2204-amd64-20240611-enkernel:5.15.0-105-genericlocale:en-usos:ubuntu-22.04-amd64system
  • submitted
    27-06-2024 09:35

General

  • Target

    SRBMiner-Multi-2-5-4/SRBMiner-MULTI

  • Size

    21.9MB

  • MD5

    a181d503df29adc73d3ee066a4040177

  • SHA1

    7d7cc4b8ad33d7a676ce67a2fdc79f7df32a7802

  • SHA256

    778c3c2ba477bb0d992423fb8b65d7e44e251aaba58ac1e5ea9c90c849436af0

  • SHA512

    df6a69222684eab3f40a2dda9ad8908d2aea51794a15b7e02cd83fe5984e1dd9bbbcc96e43f2fa22faa102e7d93b01ae1198083d21cc74a9bf59477d5b6573fe

  • SSDEEP

    393216:cdNqyHrm3y3Xipw3MGnK5Zw5TlMF2jED9W6D73TgXzannBf8/sVkWmimT291QNf+:Y7q3kmjGGy5ED/DlB4Ck9s

Score
6/10

Malware Config

Signatures

  • Checks hardware identifiers (DMI) 1 TTPs 4 IoCs

    Checks DMI information which indicate if the system is a virtual machine.

  • Reads hardware information 1 TTPs 14 IoCs

    Accesses system info like serial numbers, manufacturer names etc.

  • Checks CPU configuration 1 TTPs 1 IoCs

    Checks CPU information which indicate if the system is a virtual machine.

  • Reads CPU attributes 1 TTPs 2 IoCs
  • Enumerates kernel/hardware configuration 1 TTPs 51 IoCs

    Reads contents of /sys virtual filesystem to enumerate system information.

  • Reads runtime system information 7 IoCs

    Reads data from /proc virtual filesystem.

Processes

  • /tmp/SRBMiner-Multi-2-5-4/SRBMiner-MULTI
    /tmp/SRBMiner-Multi-2-5-4/SRBMiner-MULTI
    1⤵
    • Checks hardware identifiers (DMI)
    • Reads hardware information
    • Checks CPU configuration
    • Reads CPU attributes
    • Enumerates kernel/hardware configuration
    • Reads runtime system information
    PID:1568

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1568-1-0x00007fa14ae0b000-0x00007fa14ed367f8-memory.dmp