Overview

overview

10

Static

static

1

yak.sh

ubuntu-18.04-amd64

7

yak.sh

debian-9-armhf

7

yak.sh

debian-9-mips

10

yak.sh

debian-9-mipsel

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    yak.sh

  • Size

    2KB

  • Sample

    241124-aamklszlcn

  • MD5

    f50f60f970a5203dad27c480da7b4519

  • SHA1

    f50f26900efe72f11c37767b5db9a3916a7c76b4

  • SHA256

    ca0bd413a34399accc6f62506ac94f9c7e1fd5c4efa49d1627eed568b1de78bf

  • SHA512

    40c118ed8e7b22ba4c439cc3de9a9d69d7cccd9b4d109b00a716ea564379e001304edaffb0f9ca143e87cb0138f566aebea2e998b76c9bb4b653cf7a191e4ddd

Score
10/10
xmrigxmrig_linuxantivmdefense_evasiondiscoverylinuxminer

Malware Config

Extracted

Credentials

  • Protocol:     ftp
  • Host:
    linux-it.abuser.eu
  • Port:
    21
  • Username:
    anonymous
  • Password:
    [email protected]

Targets

    • Target

      yak.sh

    • Size

      2KB

    • MD5

      f50f60f970a5203dad27c480da7b4519

    • SHA1

      f50f26900efe72f11c37767b5db9a3916a7c76b4

    • SHA256

      ca0bd413a34399accc6f62506ac94f9c7e1fd5c4efa49d1627eed568b1de78bf

    • SHA512

      40c118ed8e7b22ba4c439cc3de9a9d69d7cccd9b4d109b00a716ea564379e001304edaffb0f9ca143e87cb0138f566aebea2e998b76c9bb4b653cf7a191e4ddd

    Score
    10/10
    defense_evasiondiscoveryantivmxmrigxmrig_linuxminer

    • XMRig Miner payload

      miner

    • Xmrig family

      xmrig

    • Xmrig_linux family

      xmrig_linux

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig_linux

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • File and Directory Permissions Modification

      Adversaries may modify file or directory permissions to evade defenses.

      defense_evasion

    • Executes dropped EXE

    • Enumerates running processes

      Discovers information about currently running processes on the system

    behavioral1behavioral2behavioral3behavioral4

MITRE ATT&CK Enterprise v15

Tasks