Overview

overview

10

Static

static

10

unpacked

ubuntu-22.04-amd64

6

unpacked

ubuntu-24.04-amd64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    unpacked

  • Size

    6.3MB

  • Sample

    241226-vmze6a1qft

  • MD5

    66cb162d1880fff9f98f9d93f0aeab73

  • SHA1

    99607f0eb75b14a5bf9891fb5104e0a9ea474427

  • SHA256

    3c58f7bc700f17de482a95d965ac76c8efb0f2614ab5f707cd9c4c61bc2acf3c

  • SHA512

    5aff245f001d695e259ff5cdad6a737ac8d7862750c7a1eca98bf07aa15f3e178b3e77e8168ced4326b8e9d08f2576bd7ca3c2fe4e495615c793c7370118ac34

  • SSDEEP

    98304:3l3SXxr6OYgW3wfYug9xCO5uL2SVPWN+XfMJ6aeOIpgKIxt9qus:3l3a6OYnpXSINTetgK7us

Score
10/10
xmrigantivmdiscoveryexecutionlinuxminerpersistenceprivilege_escalatiorootkit

Malware Config

Targets

    • Target

      unpacked

    • Size

      6.3MB

    • MD5

      66cb162d1880fff9f98f9d93f0aeab73

    • SHA1

      99607f0eb75b14a5bf9891fb5104e0a9ea474427

    • SHA256

      3c58f7bc700f17de482a95d965ac76c8efb0f2614ab5f707cd9c4c61bc2acf3c

    • SHA512

      5aff245f001d695e259ff5cdad6a737ac8d7862750c7a1eca98bf07aa15f3e178b3e77e8168ced4326b8e9d08f2576bd7ca3c2fe4e495615c793c7370118ac34

    • SSDEEP

      98304:3l3SXxr6OYgW3wfYug9xCO5uL2SVPWN+XfMJ6aeOIpgKIxt9qus:3l3a6OYnpXSINTetgK7us

    Score
    7/10
    antivmdiscoveryexecutionpersistenceprivilege_escalatiorootkit

    • Loads a kernel module

      Loads a Linux kernel module, potentially to achieve persistence

      rootkit

    • Checks hardware identifiers (DMI)

      Checks DMI information which indicate if the system is a virtual machine.

      antivm

    • Creates/modifies Cron job

      Cron allows running tasks on a schedule, and is commonly used for malware persistence.

      executionpersistenceprivilege_escalatio

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Reads hardware information

      Accesses system info like serial numbers, manufacturer names etc.

      discovery

    • Security Software Discovery

      Adversaries may attempt to discover installed security software and its configurations.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks