General

  • Target

    sshd

  • Size

    9.0MB

  • Sample

    250317-aeg6paxjv9

  • MD5

    6ecd40a1bf9a75be1d486475c594c639

  • SHA1

    6875acdc87547f7d3655a0c60690e8d4eda58586

  • SHA256

    d911729c126ba6b979167ec22146ab1d804c6dfa399e861fca0889d7bbc00884

  • SHA512

    bb1648ee3ed4032a1610f9f38ca900d0560f4bf315f05190cd14b2ae1e175c02d4c82c7d72d7403eaec772c807fd56b297e44626d06897841420571f3147ce25

  • SSDEEP

    196608:V5jZuGB+meNpJHo97DtwevyEt9z4cThn3hs:V5jZuprNpy9NkcThn3

Malware Config

Targets

    • Target

      sshd

    • Size

      9.0MB

    • MD5

      6ecd40a1bf9a75be1d486475c594c639

    • SHA1

      6875acdc87547f7d3655a0c60690e8d4eda58586

    • SHA256

      d911729c126ba6b979167ec22146ab1d804c6dfa399e861fca0889d7bbc00884

    • SHA512

      bb1648ee3ed4032a1610f9f38ca900d0560f4bf315f05190cd14b2ae1e175c02d4c82c7d72d7403eaec772c807fd56b297e44626d06897841420571f3147ce25

    • SSDEEP

      196608:V5jZuGB+meNpJHo97DtwevyEt9z4cThn3hs:V5jZuprNpy9NkcThn3

    • Xmrig_linux family

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • Cryptocurrency Miner

      Makes network request to known mining pool URL.

    • Checks hardware identifiers (DMI)

      Checks DMI information which indicate if the system is a virtual machine.

    • Reads hardware information

      Accesses system info like serial numbers, manufacturer names etc.

MITRE ATT&CK Enterprise v15

Tasks