Analysis

  • max time kernel
    0s
  • max time network
    136s
  • platform
    ubuntu-20.04_amd64
  • resource
    ubuntu2004-amd64-20240508-en
  • resource tags

    arch:amd64arch:i386image:ubuntu2004-amd64-20240508-enkernel:5.4.0-169-genericlocale:en-usos:ubuntu-20.04-amd64system
  • submitted
    25-10-2024 17:42

General

  • Target

    na.elf

  • Size

    7.9MB

  • MD5

    49fde861072798623bf35de4794f7d3d

  • SHA1

    1c9b225d3e34db9c2a0fecb9f2c254da1371f953

  • SHA256

    8268144d8232fc0dae86c2536eef50916e4ee9a23b15a561aa72971714359383

  • SHA512

    14393a6a7f9103340338e74457c6f95eb7180d2a90b87e01945be621a0d0798c05fdfb08ec3dbc2ca61ee2cbb6299b48e8b27c01b00913b5e5e9ed704318ac22

  • SSDEEP

    98304:ljfOYeGaP4PtGR8PCukwzX0dkcicpuuXmEBuYgPEVSLzHfPuDrYXmGW++RVahv04:6X4Pa8eSLbFm6HqNtly9EGjhy

Malware Config

Signatures

  • Xmrig_linux family
  • xmrig

    XMRig is a high performance, open source, cross platform CPU/GPU miner.

  • Checks hardware identifiers (DMI) 1 TTPs 4 IoCs

    Checks DMI information which indicate if the system is a virtual machine.

  • Reads hardware information 1 TTPs 14 IoCs

    Accesses system info like serial numbers, manufacturer names etc.

  • Checks CPU configuration 1 TTPs 1 IoCs

    Checks CPU information which indicate if the system is a virtual machine.

  • Reads CPU attributes 1 TTPs 46 IoCs
  • Enumerates kernel/hardware configuration 1 TTPs 21 IoCs

    Reads contents of /sys virtual filesystem to enumerate system information.

  • Reads runtime system information 4 IoCs

    Reads data from /proc virtual filesystem.

Processes

  • /tmp/na.elf
    /tmp/na.elf
    1⤵
    • Checks hardware identifiers (DMI)
    • Reads hardware information
    • Checks CPU configuration
    • Reads CPU attributes
    • Enumerates kernel/hardware configuration
    • Reads runtime system information
    PID:1399

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads