Overview

overview

10

Static

static

5

7a5c9606d0...af4574

ubuntu-22.04-amd64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7a5c9606d068a16565c65aa8c5ee11ccecdc7098b91023dcfdb0c78695af4574

  • Size

    2.1MB

  • Sample

    241103-zd98hssrcx

  • MD5

    1c36e8aaac825bcb9a086ecf2a471c89

  • SHA1

    66cb901aadae8db4511a364024d555427d78d3f9

  • SHA256

    7a5c9606d068a16565c65aa8c5ee11ccecdc7098b91023dcfdb0c78695af4574

  • SHA512

    8a65ee52874ec24b4dda49e63153aec981bd310c49245f5d26592824a1ad0da52c7233c31e7a380ba1fe9aeff6f453db1345686eceafb8b6dfd80f9eef25dda1

  • SSDEEP

    49152:WWD683TqbMtemJOGmHBox1Q6jtSVVO7EHsq8:J6dM3OGUCoPVs7EH8

Score
10/10
xmrigxmrig_linuxantivmdiscoverylinuxminerupx

Malware Config

Targets

    • Target

      7a5c9606d068a16565c65aa8c5ee11ccecdc7098b91023dcfdb0c78695af4574

    • Size

      2.1MB

    • MD5

      1c36e8aaac825bcb9a086ecf2a471c89

    • SHA1

      66cb901aadae8db4511a364024d555427d78d3f9

    • SHA256

      7a5c9606d068a16565c65aa8c5ee11ccecdc7098b91023dcfdb0c78695af4574

    • SHA512

      8a65ee52874ec24b4dda49e63153aec981bd310c49245f5d26592824a1ad0da52c7233c31e7a380ba1fe9aeff6f453db1345686eceafb8b6dfd80f9eef25dda1

    • SSDEEP

      49152:WWD683TqbMtemJOGmHBox1Q6jtSVVO7EHsq8:J6dM3OGUCoPVs7EH8

    Score
    10/10
    xmrigxmrig_linuxantivmdiscoveryminerupx

    • Xmrig family

      xmrig

    • Xmrig_linux family

      xmrig_linux

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig_linux

    • XMRig Miner payload

      miner

    • Attempts to change immutable files

      Modifies inode attributes on the filesystem to allow changing of immutable files.

    • Checks hardware identifiers (DMI)

      Checks DMI information which indicate if the system is a virtual machine.

      antivm

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Reads hardware information

      Accesses system info like serial numbers, manufacturer names etc.

      discovery

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks