General

  • Target

    zzh.elf

  • Size

    2.5MB

  • Sample

    241208-jlyxfsxnbs

  • MD5

    3af52960186531a27666f8e13e9fc791

  • SHA1

    7407ce5235985454654c33475c8166f3c064ad1a

  • SHA256

    df9ffb59477862540a40c02121561550f3c58507e70d6da0d3d8a786761ebb42

  • SHA512

    c6eaea0af6b7c9128021333b8faf99dad013f0dbba26850b64d44e07baea5df94d4cbefc3d2cfc29fd930f3534660f544c5636c092d3926e55f7bd84b3f07c82

  • SSDEEP

    49152:CkGSvy3DUQq4587hVTCu1FQYTQLrN89Tmki+8nnrr1FwO:tAn5o/TjFQf8BmtdnnN+O

Malware Config

Targets

    • Target

      zzh.elf

    • Size

      2.5MB

    • MD5

      3af52960186531a27666f8e13e9fc791

    • SHA1

      7407ce5235985454654c33475c8166f3c064ad1a

    • SHA256

      df9ffb59477862540a40c02121561550f3c58507e70d6da0d3d8a786761ebb42

    • SHA512

      c6eaea0af6b7c9128021333b8faf99dad013f0dbba26850b64d44e07baea5df94d4cbefc3d2cfc29fd930f3534660f544c5636c092d3926e55f7bd84b3f07c82

    • SSDEEP

      49152:CkGSvy3DUQq4587hVTCu1FQYTQLrN89Tmki+8nnrr1FwO:tAn5o/TjFQf8BmtdnnN+O

    • Xmrig family

    • Xmrig_linux family

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Checks hardware identifiers (DMI)

      Checks DMI information which indicate if the system is a virtual machine.

    • Reads hardware information

      Accesses system info like serial numbers, manufacturer names etc.

MITRE ATT&CK Enterprise v15

Tasks