Overview

overview

10

Static

static

1

udeb

ubuntu-22.04-amd64

10

Resubmissions

26-11-2024 09:24

241126-ldj5favnby 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    udeb

  • Size

    6.9MB

  • Sample

    241126-ldj5favnby

  • MD5

    701eb0067af1d07ca8dae2380f8501fe

  • SHA1

    432f0a8848a049467dc023a213515b067444147b

  • SHA256

    64329f551dc7f337ef25e81d71ea8ad1b436cd320361a5e03c629dce086f761e

  • SHA512

    faef2fa7d5ebc2a2117a61b6019a226fcff9caa518413a31042968ce78b7d3e7ca3a572a4ef61041820accf161b13140d75f5146670fc04fac980a984411337b

  • SSDEEP

    98304:P4UcNQeb7GWYv8EZVVfk1DU8CsCUsRiKq4MPP:wfLvGWcZYUFPUQ+PP

Score
10/10
xmrigxmrig_linuxantivmdefense_evasiondiscoveryexectionlinuxminerpersistenceprivilege_escalation

Malware Config

Targets

    • Target

      udeb

    • Size

      6.9MB

    • MD5

      701eb0067af1d07ca8dae2380f8501fe

    • SHA1

      432f0a8848a049467dc023a213515b067444147b

    • SHA256

      64329f551dc7f337ef25e81d71ea8ad1b436cd320361a5e03c629dce086f761e

    • SHA512

      faef2fa7d5ebc2a2117a61b6019a226fcff9caa518413a31042968ce78b7d3e7ca3a572a4ef61041820accf161b13140d75f5146670fc04fac980a984411337b

    • SSDEEP

      98304:P4UcNQeb7GWYv8EZVVfk1DU8CsCUsRiKq4MPP:wfLvGWcZYUFPUQ+PP

    Score
    10/10
    xmrigxmrig_linuxantivmdefense_evasiondiscoveryexectionminerpersistenceprivilege_escalation

    • XMRig Miner payload

      miner

    • Xmrig family

      xmrig

    • Xmrig_linux family

      xmrig_linux

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig_linux

    • Modifies the dynamic linker configuration file

      Malware can modify the configuration file of the dynamic linker to preload malicous libraries with every executed process.

      exectionpersistenceprivilege_escalationdefense_evasion

    • Executes dropped EXE

    • Checks hardware identifiers (DMI)

      Checks DMI information which indicate if the system is a virtual machine.

      antivm

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Reads hardware information

      Accesses system info like serial numbers, manufacturer names etc.

      discovery

    • Write file to user bin folder

      persistence
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks