Analysis

  • max time kernel
    149s
  • max time network
    166s
  • platform
    ubuntu-22.04_amd64
  • resource
    ubuntu2204-amd64-20240611-en
  • resource tags

    arch:amd64arch:i386image:ubuntu2204-amd64-20240611-enkernel:5.15.0-105-genericlocale:en-usos:ubuntu-22.04-amd64system
  • submitted
    17/02/2025, 18:23

General

  • Target

    Linux-Malware-Samples-main/04b5e29283c60fcc255f8d2f289238430a10624e457f12f1bc866454110830a2

  • Size

    5.5MB

  • MD5

    1645021b413ad8a7e8c9ddb3fe0d8655

  • SHA1

    a41531a3c9e11cb697aa5b801ef7218e7650b9fe

  • SHA256

    04b5e29283c60fcc255f8d2f289238430a10624e457f12f1bc866454110830a2

  • SHA512

    8b28422c18b25d1ab0b9f8578e91c25f6673cc87fcf07b3e743c190c01590e3b5a16fd75e4ec208c3199e437e595a27c04a01a443bb48d4f3d5685500ef61288

  • SSDEEP

    98304:xcs0sgKVVKMVKmGjEj/jM8MMM8MMMMMwMMwbvUvUvkGjrGjPjORF4PI31l/cUdVo:h0iG41OoHSaBaXTejEvbo

Malware Config

Signatures

  • Xmrig_linux family
  • xmrig

    XMRig is a high performance, open source, cross platform CPU/GPU miner.

  • Checks hardware identifiers (DMI) 1 TTPs 4 IoCs

    Checks DMI information which indicate if the system is a virtual machine.

  • Reads hardware information 1 TTPs 14 IoCs

    Accesses system info like serial numbers, manufacturer names etc.

  • Checks CPU configuration 1 TTPs 1 IoCs

    Checks CPU information which indicate if the system is a virtual machine.

  • Reads CPU attributes 1 TTPs 3 IoCs
  • Enumerates kernel/hardware configuration 1 TTPs 58 IoCs

    Reads contents of /sys virtual filesystem to enumerate system information.

  • Reads runtime system information 4 IoCs

    Reads data from /proc virtual filesystem.

Processes

  • /tmp/Linux-Malware-Samples-main/04b5e29283c60fcc255f8d2f289238430a10624e457f12f1bc866454110830a2
    /tmp/Linux-Malware-Samples-main/04b5e29283c60fcc255f8d2f289238430a10624e457f12f1bc866454110830a2
    1⤵
    • Checks hardware identifiers (DMI)
    • Reads hardware information
    • Checks CPU configuration
    • Reads CPU attributes
    • Enumerates kernel/hardware configuration
    • Reads runtime system information
    PID:1565

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads