Analysis

  • max time kernel
    0s
  • max time network
    129s
  • platform
    ubuntu-22.04_amd64
  • resource
    ubuntu2204-amd64-20240611-en
  • resource tags

    arch:amd64arch:i386image:ubuntu2204-amd64-20240611-enkernel:5.15.0-105-genericlocale:en-usos:ubuntu-22.04-amd64system
  • submitted
    30-10-2024 21:29

General

  • Target

    tuefv1.elf

  • Size

    8.2MB

  • MD5

    e63c67b5e3d7ed50f545f169bbabb85d

  • SHA1

    dc257558381a518aec15ee646364eda18da3ad32

  • SHA256

    71cf150028e4b67bcd8cb50c4aa86eecab1615195cf6a45024e9c4e55aa1e7fd

  • SHA512

    a8c7a967a391f7799952ee3ea530cf5e62835860956586f1ee976b6089aead991aa1379a70e7190806e0999d53774432243ecb58b7a2878090f836068ba9a76e

  • SSDEEP

    98304:MgbD211H7WHt+HQNymofADvDvD09UG6nXxTu3xxmVPxS5Af/nHi8Z7KJiWPE3PEf:SVZ6sbVIHCRjQvr1s

Malware Config

Signatures

  • Xmrig_linux family
  • xmrig

    XMRig is a high performance, open source, cross platform CPU/GPU miner.

  • Checks hardware identifiers (DMI) 1 TTPs 4 IoCs

    Checks DMI information which indicate if the system is a virtual machine.

  • Reads hardware information 1 TTPs 14 IoCs

    Accesses system info like serial numbers, manufacturer names etc.

  • Checks CPU configuration 1 TTPs 1 IoCs

    Checks CPU information which indicate if the system is a virtual machine.

  • Reads CPU attributes 1 TTPs 46 IoCs
  • Enumerates kernel/hardware configuration 1 TTPs 23 IoCs

    Reads contents of /sys virtual filesystem to enumerate system information.

  • Reads runtime system information 4 IoCs

    Reads data from /proc virtual filesystem.

Processes

  • /tmp/tuefv1.elf
    /tmp/tuefv1.elf
    1⤵
    • Checks hardware identifiers (DMI)
    • Reads hardware information
    • Checks CPU configuration
    • Reads CPU attributes
    • Enumerates kernel/hardware configuration
    • Reads runtime system information
    PID:1566

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads