General
-
Target
linux_version
-
Size
6.8MB
-
Sample
240825-yegrxssgnr
-
MD5
b1d7193b60e93d293689e2303cf332c9
-
SHA1
471d23ab3012e84fd0ff81b74ea2f7c8472de20d
-
SHA256
f649ad75749bec6ce9cd58073af60687af83a253dbf5806adac6571da0012d04
-
SHA512
d48309be4919de0048dee291f4d49e63737364e80d873bf6ea516c4d32f5552c9350fa3364c1e1917827f78fce63a9171f735aa1bde27095fc114f1ec01cc6be
-
SSDEEP
98304:BLgiVSwDwUC2M42EF/nQ3249addaDz+UlSQB:BLgePDwUCoo2ctqUlSQB
Static task
static1
Behavioral task
behavioral1
Sample
linux_version
Resource
debian12-armhf-20240221-en
Behavioral task
behavioral2
Sample
linux_version
Resource
debian12-mipsel-20240221-en
Behavioral task
behavioral3
Sample
linux_version
Resource
ubuntu2204-amd64-20240611-en
Behavioral task
behavioral4
Sample
linux_version
Resource
ubuntu2404-amd64-20240523-en
Malware Config
Targets
-
-
Target
linux_version
-
Size
6.8MB
-
MD5
b1d7193b60e93d293689e2303cf332c9
-
SHA1
471d23ab3012e84fd0ff81b74ea2f7c8472de20d
-
SHA256
f649ad75749bec6ce9cd58073af60687af83a253dbf5806adac6571da0012d04
-
SHA512
d48309be4919de0048dee291f4d49e63737364e80d873bf6ea516c4d32f5552c9350fa3364c1e1917827f78fce63a9171f735aa1bde27095fc114f1ec01cc6be
-
SSDEEP
98304:BLgiVSwDwUC2M42EF/nQ3249addaDz+UlSQB:BLgePDwUCoo2ctqUlSQB
Score10/10-
XMRig Miner payload
-
Executes dropped EXE
-
Checks hardware identifiers (DMI)
Checks DMI information which indicate if the system is a virtual machine.
-
Legitimate hosting services abused for malware hosting/C2
-
Reads hardware information
Accesses system info like serial numbers, manufacturer names etc.
-