Overview

overview

10

Static

static

1

40ae63b1ff...681.sh

ubuntu-18.04-amd64

6

40ae63b1ff...681.sh

debian-9-armhf

6

40ae63b1ff...681.sh

debian-9-mips

10

40ae63b1ff...681.sh

debian-9-mipsel

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    40ae63b1ffcb46225bde34c0c6a8dbc8a8cca0b19755143cfe1c1ed7575bf681.sh

  • Size

    3KB

  • Sample

    241228-cp2n7atnh1

  • MD5

    03cfaa6e131dd4ea1c7807517d4376d6

  • SHA1

    d21b174325a36f93d7703ea4d3b79ef0a1acca07

  • SHA256

    40ae63b1ffcb46225bde34c0c6a8dbc8a8cca0b19755143cfe1c1ed7575bf681

  • SHA512

    d75a5963f4e8d831d0284b927292141dde345d76ea5c15f2d448cf99f3b9175f6e3752dc68cae03a3e6f73e0046c54005593cb7305eb1e25a290be8db0dcbcd9

Score
10/10
xmrigantivmdefense_evasiondiscoverylinuxminer

Malware Config

Targets

    • Target

      40ae63b1ffcb46225bde34c0c6a8dbc8a8cca0b19755143cfe1c1ed7575bf681.sh

    • Size

      3KB

    • MD5

      03cfaa6e131dd4ea1c7807517d4376d6

    • SHA1

      d21b174325a36f93d7703ea4d3b79ef0a1acca07

    • SHA256

      40ae63b1ffcb46225bde34c0c6a8dbc8a8cca0b19755143cfe1c1ed7575bf681

    • SHA512

      d75a5963f4e8d831d0284b927292141dde345d76ea5c15f2d448cf99f3b9175f6e3752dc68cae03a3e6f73e0046c54005593cb7305eb1e25a290be8db0dcbcd9

    Score
    10/10
    discoveryantivmxmrigdefense_evasionminer

    • XMRig Miner payload

      miner

    • Xmrig family

      xmrig

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • File and Directory Permissions Modification

      Adversaries may modify file or directory permissions to evade defenses.

      defense_evasion

    • Executes dropped EXE

    • Attempts to change immutable files

      Modifies inode attributes on the filesystem to allow changing of immutable files.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    behavioral1behavioral2behavioral3behavioral4

MITRE ATT&CK Enterprise v15

Tasks