Overview

overview

10

Static

static

1

minstall.sh

ubuntu-18.04-amd64

10

minstall.sh

debian-9-armhf

10

minstall.sh

debian-9-mips

10

minstall.sh

debian-9-mipsel

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    minstall.sh

  • Size

    1KB

  • Sample

    250405-2mrtmszk14

  • MD5

    a40271ae5c12ad0c61ec0409fc3723d1

  • SHA1

    79077d993d18b6be073e899d62bef022c957c17f

  • SHA256

    f03e577b9f65b4318c9ed2acb510c5c7f681ff07446bdc66f105028eea327908

  • SHA512

    20b68e61d328a3ab94e5ea5413a90b242b72d3dcf19ac398af10ae3247abafb3f3214ed1dc1a6823be74871ae056a4b03cdba7ed6af85621a9905c278386e388

Score
10/10
xmrigxmrig_linuxantivmdiscoverylinuxminer

Malware Config

Targets

    • Target

      minstall.sh

    • Size

      1KB

    • MD5

      a40271ae5c12ad0c61ec0409fc3723d1

    • SHA1

      79077d993d18b6be073e899d62bef022c957c17f

    • SHA256

      f03e577b9f65b4318c9ed2acb510c5c7f681ff07446bdc66f105028eea327908

    • SHA512

      20b68e61d328a3ab94e5ea5413a90b242b72d3dcf19ac398af10ae3247abafb3f3214ed1dc1a6823be74871ae056a4b03cdba7ed6af85621a9905c278386e388

    Score
    10/10
    xmrigxmrig_linuxantivmdiscoveryminer

    • XMRig Miner payload

      miner

    • Xmrig family

      xmrig

    • Xmrig_linux family

      xmrig_linux

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig_linux

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • Executes dropped EXE

    • Checks hardware identifiers (DMI)

      Checks DMI information which indicate if the system is a virtual machine.

      antivm

    • Reads hardware information

      Accesses system info like serial numbers, manufacturer names etc.

      discovery
    behavioral1behavioral2behavioral3behavioral4

MITRE ATT&CK Enterprise v15

Tasks