Analysis
-
max time kernel
24s -
max time network
8s -
platform
ubuntu-24.04_amd64 -
resource
ubuntu2404-amd64-20240523-en -
resource tags
-
submitted
15-11-2024 17:48
General
-
Target
netaddr
-
Size
2.7MB
-
MD5
d3ded6e2bc7c3be35de8e21b3a6f6377
-
SHA1
2c76eb217720e628cd230e9543846802f813c203
-
SHA256
0730bcc54e11905817761dad591a0a69fee73c14c5f16ea155034383976b24b2
-
SHA512
55a2c4f39642c56ee7ee00ef49c47086ff08017d969c354858c37a7ccc1c729e424f376b58e60aa178dd96431be82fe97592e9c12a0d6dc96440253fd1a1e124
-
SSDEEP
49152:TaSTsKoIsBdROFjHTlmvhnKHK9gzNKgvHbRtbJ+oTBT+VvmRut++pLL0rfsDoNQU:TdsBdROFjHTgvhKHKAKgvHbRtb0ysVvE
Malware Config
Signatures
-
Xmrig family
-
Xmrig_linux family
-
xmrig
XMRig is a high performance, open source, cross platform CPU/GPU miner.
-
XMRig Miner payload 1 IoCs
-
Checks hardware identifiers (DMI) 1 TTPs 4 IoCs
Checks DMI information which indicate if the system is a virtual machine.
-
Reads hardware information 1 TTPs 14 IoCs
Accesses system info like serial numbers, manufacturer names etc.
-
Checks CPU configuration 1 TTPs 1 IoCs
Checks CPU information which indicate if the system is a virtual machine.
-
Reads CPU attributes 1 TTPs 45 IoCs
-
Enumerates kernel/hardware configuration 1 TTPs 27 IoCs
Reads contents of /sys virtual filesystem to enumerate system information.
-
Reads runtime system information 8 IoCs
Reads data from /proc virtual filesystem.
Processes
-
/tmp/netaddr/tmp/netaddr1⤵
- Checks hardware identifiers (DMI)
- Reads hardware information
- Checks CPU configuration
- Reads CPU attributes
- Enumerates kernel/hardware configuration
- Reads runtime system information