Overview

overview

10

Static

static

10

sh恶意脚本/ap.sh

ubuntu-18.04-amd64

sh恶意脚本/ap.sh

debian-9-armhf

sh恶意脚本/ap.sh

debian-9-mips

sh恶意脚本/ap.sh

debian-9-mipsel

sh恶意脚本/ap.txt

ubuntu-18.04-amd64

sh恶意脚本/ap.txt

debian-9-armhf

sh恶意脚本/ap.txt

debian-9-mips

sh恶意脚本/ap.txt

debian-9-mipsel

sh恶意脚本/ldr.sh

ubuntu-18.04-amd64

sh恶意脚本/ldr.sh

debian-9-armhf

sh恶意脚本/ldr.sh

debian-9-mips

sh恶意脚本/ldr.sh

debian-9-mipsel

恶意软件/kik.exe

ubuntu-22.04-amd64

6

挖矿程�...2C0CFB

ubuntu-22.04-amd64

10

挖矿配�...g.json

ubuntu-18.04-amd64

挖矿配�...g.json

debian-9-armhf

挖矿配�...g.json

debian-9-mips

挖矿配�...g.json

debian-9-mipsel

漏洞利�...ko.exe

ubuntu-22.04-amd64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Linux.zip

  • Size

    4.1MB

  • MD5

    f95f7d92d58b9d675b71421ef04f7c1a

  • SHA1

    ff245aa9e3ac112fd7c98f099f5ba6f38badf89e

  • SHA256

    8fb447abc33084b5f1cec568a86fa14a3bbd5cb36d508fdd04c90b3b69a5d01b

  • SHA512

    ade29415aecbb7e9194ec850a4ef16ef315d9f7b254662ec8c2a8103c2ff6c0acedbbed8c579da18ae93138f34885e06dae760e34ddb3847791cf9215f744e35

  • SSDEEP

    98304:zKnHppIXEQMzAiomuotmQyRPng3UuSyMclETgZpoAjDge9e:zUJG0/kmF87O3BacJHoAj0e9e

Score
10/10
minerxmrig

Malware Config

Signatures

  • XMRig Miner payload 2 IoCs
    miner
  • Xmrig family
    xmrig

Files

  • Linux.zip
    .zip
  • sh恶意脚本/ap.sh
    .sh linux
  • sh恶意脚本/ap.txt
  • sh恶意脚本/ldr.sh
    .sh linux
  • 恶意软件/kik.exe
    .elf linux x64
  • 挖矿程序/ED573E9B9087C650D06CFB76C62C0CFB
    .elf linux x64
  • 挖矿配置文件/config.json
  • 漏洞利用程序/ko.exe
    .elf linux x64