Overview

overview

10

Static

static

7

kswapd0

ubuntu-24.04-amd64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    kswapd0

  • Size

    2.1MB

  • Sample

    240731-hclebsvhqc

  • MD5

    3b928d87be14aa661b14bb1c29636650

  • SHA1

    f2b4bc2244ea8596a2a2a041308aa75088b6bbd5

  • SHA256

    083e706194a92aa96825007dbcbaff4f64a0200c77a70cde17974be6716886e6

  • SHA512

    f98f718fce0a1e6312c96ab74929a8c84cf5b720b0f2a4578e8fadb55d0d002f56f90b092a863fa1f5a99a5441fff583920b0e0e0ff34d28a7166d29446421bc

  • SSDEEP

    49152:sexAtJHwlST44nnsrQTygWfeCD/AWgZYAIFtvXRPiD9mX:seVSTLsOyxD/rgZz4vpiD9mX

Score
10/10
xmrig_linuxantivmlinuxminerupx

Malware Config

Targets

    • Target

      kswapd0

    • Size

      2.1MB

    • MD5

      3b928d87be14aa661b14bb1c29636650

    • SHA1

      f2b4bc2244ea8596a2a2a041308aa75088b6bbd5

    • SHA256

      083e706194a92aa96825007dbcbaff4f64a0200c77a70cde17974be6716886e6

    • SHA512

      f98f718fce0a1e6312c96ab74929a8c84cf5b720b0f2a4578e8fadb55d0d002f56f90b092a863fa1f5a99a5441fff583920b0e0e0ff34d28a7166d29446421bc

    • SSDEEP

      49152:sexAtJHwlST44nnsrQTygWfeCD/AWgZYAIFtvXRPiD9mX:seVSTLsOyxD/rgZz4vpiD9mX

    Score
    10/10
    xmrig_linuxantivmminer

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig_linux

    • XMRig Miner payload

      miner

    • Attempts to change immutable files

      Modifies inode attributes on the filesystem to allow changing of immutable files.

    • Checks hardware identifiers (DMI)

      Checks DMI information which indicate if the system is a virtual machine.

      antivm

    • Reads hardware information

      Accesses system info like serial numbers, manufacturer names etc.

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks