Overview

overview

10

Static

static

1

ee2a183834...92A.sh

ubuntu-24.04-amd64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    ee2a1838344c1b22dcea81766204f3692A.sh
  • Size 6KB
  • Sample241104-x5evksvmfx
  • SHA256 07f9edc6e718ebcbead64e0a2afda717f9296e76a2a5654c2b50ad7e76cd4106
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
xmrig_linuxantivmcredential_accessdefense_evasiondiscoverylinuxminerprivilege_escalation

Malware Config

Targets

    • Target
      ee2a1838344c1b22dcea81766204f3692A.sh
    • Size 6KB
    • SHA256 07f9edc6e718ebcbead64e0a2afda717f9296e76a2a5654c2b50ad7e76cd4106
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    xmrig_linuxantivmcredential_accessdefense_evasiondiscoveryminerprivilege_escalation

    • Xmrig_linux family

      xmrig_linux

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig_linux

    • Executes dropped EXE

    • OS Credential Dumping

      Adversaries may attempt to dump credentials to use it in password cracking.

      credential_access

    • Abuse Elevation Control Mechanism: Sudo and Sudo Caching

      Abuse sudo or cached sudo credentials to execute code.

      privilege_escalationdefense_evasion

    • Checks hardware identifiers (DMI)

      Checks DMI information which indicate if the system is a virtual machine.

      antivm

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Reads hardware information

      Accesses system info like serial numbers, manufacturer names etc.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks