Overview

overview

10

Static

static

1

kernel.sh

ubuntu-18.04-amd64

6

kernel.sh

debian-9-armhf

6

kernel.sh

debian-9-mips

10

kernel.sh

debian-9-mipsel

10

Resubmissions

13-12-2024 16:40

241213-t61lwsvjfx 10

13-12-2024 09:54

241213-lw7y8avjgx 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    kernel.sh

  • Size

    3KB

  • Sample

    241213-lw7y8avjgx

  • MD5

    70b5ca97532b13cf5743c138d213ef1f

  • SHA1

    55ce28f0db3d7fbd69c72d78282b06147df690f9

  • SHA256

    7bc7583c91a5b3880dcb9ae735530d4990d13f67216f08dfa140f927a09c1a87

  • SHA512

    253b9e6eda76101b81522d412fa394da12406997e813f1cc49dcfc57dbf6b432d64829600a2d0413a7ecfce3e6f412f4529eb4a35b278bf5fb3626fc5f7dbfa6

Score
10/10
xmrigantivmdefense_evasiondiscoverylinuxminer

Malware Config

Targets

    • Target

      kernel.sh

    • Size

      3KB

    • MD5

      70b5ca97532b13cf5743c138d213ef1f

    • SHA1

      55ce28f0db3d7fbd69c72d78282b06147df690f9

    • SHA256

      7bc7583c91a5b3880dcb9ae735530d4990d13f67216f08dfa140f927a09c1a87

    • SHA512

      253b9e6eda76101b81522d412fa394da12406997e813f1cc49dcfc57dbf6b432d64829600a2d0413a7ecfce3e6f412f4529eb4a35b278bf5fb3626fc5f7dbfa6

    Score
    10/10
    discoveryantivmxmrigdefense_evasionminer

    • XMRig Miner payload

      miner

    • Xmrig family

      xmrig

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • File and Directory Permissions Modification

      Adversaries may modify file or directory permissions to evade defenses.

      defense_evasion

    • Executes dropped EXE

    • Attempts to change immutable files

      Modifies inode attributes on the filesystem to allow changing of immutable files.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    behavioral1behavioral2behavioral3behavioral4

MITRE ATT&CK Enterprise v15

Tasks