General
- Target script.sh
- Size 8KB
- Sample240701-npvressepp
- SHA256 d97530313d2423ba8c3e87ccd3d66e6cd77997d26bbb4d1dd2a5f32827dde8cd
Score
10/10
Malware Config
Targets
-
- Target script.sh
- Size 8KB
- SHA256 d97530313d2423ba8c3e87ccd3d66e6cd77997d26bbb4d1dd2a5f32827dde8cd
Score10/10XMRig Miner payload
xmrig
XMRig is a high performance, open source, cross platform CPU/GPU miner.
xmrig
XMRig is a high performance, open source, cross platform CPU/GPU miner.
Executes dropped EXE
Reads EFI boot settings
Reads EFI boot settings from the efivars filesystem, may contain security secrets or sensitive data.
Checks hardware identifiers (DMI)
Checks DMI information which indicate if the system is a virtual machine.
Enumerates running processes
Discovers information about currently running processes on the system
Legitimate hosting services abused for malware hosting/C2
Reads hardware information
Accesses system info like serial numbers, manufacturer names etc.