Overview

overview

6

Static

static

3

cpuminer-g...al.bat

windows10-2004-x64

1

cpuminer-g...al.bat

windows11-21h2-x64

1

cpuminer-g...an.bat

windows10-2004-x64

1

cpuminer-g...an.bat

windows11-21h2-x64

1

cpuminer-g...es.bat

windows10-2004-x64

1

cpuminer-g...es.bat

windows11-21h2-x64

1

cpuminer-g...gen.sh

ubuntu-18.04-amd64

1

cpuminer-g...gen.sh

debian-9-armhf

1

cpuminer-g...gen.sh

debian-9-mips

1

cpuminer-g...gen.sh

debian-9-mipsel

1

cpuminer-g...64.sys

windows10-2004-x64

1

cpuminer-g...64.sys

windows11-21h2-x64

1

cpuminer-g...er.bat

windows10-2004-x64

1

cpuminer-g...er.bat

windows11-21h2-x64

1

cpuminer-g...ner.sh

ubuntu-18.04-amd64

6

cpuminer-g...ner.sh

debian-9-armhf

6

cpuminer-g...ner.sh

debian-9-mips

6

cpuminer-g...ner.sh

debian-9-mipsel

6

cpuminer-g...rch.sh

ubuntu-18.04-amd64

3

cpuminer-g...rch.sh

debian-9-armhf

3

cpuminer-g...rch.sh

debian-9-mips

3

cpuminer-g...rch.sh

debian-9-mipsel

3

cpuminer-g...ild.sh

ubuntu-18.04-amd64

3

cpuminer-g...ild.sh

debian-9-armhf

3

cpuminer-g...ild.sh

debian-9-mips

3

cpuminer-g...ild.sh

debian-9-mipsel

3

cpuminer-g...ad.bat

windows10-2004-x64

1

cpuminer-g...ad.bat

windows11-21h2-x64

1

cpuminer-g...re.bat

windows10-2004-x64

1

cpuminer-g...re.bat

windows11-21h2-x64

1

cpuminer-g...er.vbs

windows10-2004-x64

1

cpuminer-g...er.vbs

windows11-21h2-x64

1

Analysis

  • max time kernel
    3s
  • platform
    debian-9_mipsel
  • resource
    debian9-mipsel-20260513-en
  • resource tags

    arch:mipselimage:debian9-mipsel-20260513-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem
  • submitted
    04/06/2026, 12:21

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    cpuminer-gr-avx2-1.2.4.1/bin/cpuminer.sh
  • Size 4KB
  • Sample260604-pjf7hsft9k
  • SHA256 ea18d5e603cd1febf11c103ee4809478f34a87c84b2a4f4989f9e584fd6dd776
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
antivmdiscovery

Malware Config

Signatures

  • Checks system information (zLinux) 1 TTPs 11 IoCs

    Check system information on IBM zSystems which indicate if the system is a virtual machine.

    antivm
  • Checks CPU configuration 1 TTPs 11 IoCs

    Checks CPU information which indicate if the system is a virtual machine.

    antivm
  • Reads CPU attributes 1 TTPs 64 IoCs
    discovery
  • Enumerates kernel/hardware configuration 1 TTPs 22 IoCs

    Reads contents of /sys virtual filesystem to enumerate system information.

    discovery
  • Reads runtime system information 55 IoCs

    Reads data from /proc virtual filesystem.

    discovery

Processes

  • /tmp/cpuminer-gr-avx2-1.2.4.1/bin/cpuminer.sh
    /tmp/cpuminer-gr-avx2-1.2.4.1/bin/cpuminer.sh
    1⤵
      PID:721
      • /usr/bin/dirname
        dirname /tmp/cpuminer-gr-avx2-1.2.4.1/bin/cpuminer.sh
        2⤵
          PID:723
        • /usr/bin/lscpu
          lscpu
          2⤵
          • Checks system information (zLinux)
          • Checks CPU configuration
          • Reads CPU attributes
          • Enumerates kernel/hardware configuration
          • Reads runtime system information
          PID:728
        • /usr/bin/lscpu
          lscpu
          2⤵
          • Checks system information (zLinux)
          • Checks CPU configuration
          • Reads CPU attributes
          • Enumerates kernel/hardware configuration
          • Reads runtime system information
          PID:731
        • /bin/egrep
          egrep "Model name"
          2⤵
            PID:732
          • /usr/bin/tr
            tr -s " "
            2⤵
              PID:733
            • /usr/bin/cut
              cut -d: -f 2-
              2⤵
                PID:734
              • /usr/local/sbin/grep
                grep -E "Model name"
                2⤵
                  PID:732
                • /usr/local/bin/grep
                  grep -E "Model name"
                  2⤵
                    PID:732
                  • /usr/sbin/grep
                    grep -E "Model name"
                    2⤵
                      PID:732
                    • /usr/bin/grep
                      grep -E "Model name"
                      2⤵
                        PID:732
                      • /sbin/grep
                        grep -E "Model name"
                        2⤵
                          PID:732
                        • /bin/grep
                          grep -E "Model name"
                          2⤵
                            PID:732
                          • /usr/bin/lscpu
                            lscpu
                            2⤵
                            • Checks system information (zLinux)
                            • Checks CPU configuration
                            • Reads CPU attributes
                            • Enumerates kernel/hardware configuration
                            • Reads runtime system information
                            PID:735
                          • /bin/egrep
                            egrep -i GenuineIntel
                            2⤵
                              PID:736
                            • /usr/local/sbin/grep
                              grep -E -i GenuineIntel
                              2⤵
                                PID:736
                              • /usr/local/bin/grep
                                grep -E -i GenuineIntel
                                2⤵
                                  PID:736
                                • /usr/sbin/grep
                                  grep -E -i GenuineIntel
                                  2⤵
                                    PID:736
                                  • /usr/bin/grep
                                    grep -E -i GenuineIntel
                                    2⤵
                                      PID:736
                                    • /sbin/grep
                                      grep -E -i GenuineIntel
                                      2⤵
                                        PID:736
                                      • /bin/grep
                                        grep -E -i GenuineIntel
                                        2⤵
                                          PID:736
                                        • /usr/bin/lscpu
                                          lscpu
                                          2⤵
                                          • Checks system information (zLinux)
                                          • Checks CPU configuration
                                          • Reads CPU attributes
                                          • Enumerates kernel/hardware configuration
                                          • Reads runtime system information
                                          PID:738
                                        • /bin/egrep
                                          egrep -i AuthenticAMD
                                          2⤵
                                            PID:739
                                          • /usr/local/sbin/grep
                                            grep -E -i AuthenticAMD
                                            2⤵
                                              PID:739
                                            • /usr/local/bin/grep
                                              grep -E -i AuthenticAMD
                                              2⤵
                                                PID:739
                                              • /usr/sbin/grep
                                                grep -E -i AuthenticAMD
                                                2⤵
                                                  PID:739
                                                • /usr/bin/grep
                                                  grep -E -i AuthenticAMD
                                                  2⤵
                                                    PID:739
                                                  • /sbin/grep
                                                    grep -E -i AuthenticAMD
                                                    2⤵
                                                      PID:739
                                                    • /bin/grep
                                                      grep -E -i AuthenticAMD
                                                      2⤵
                                                        PID:739
                                                      • /usr/bin/lscpu
                                                        lscpu
                                                        2⤵
                                                        • Checks system information (zLinux)
                                                        • Checks CPU configuration
                                                        • Reads CPU attributes
                                                        • Enumerates kernel/hardware configuration
                                                        • Reads runtime system information
                                                        PID:740
                                                      • /bin/egrep
                                                        egrep -i " avx512f( |\$)"
                                                        2⤵
                                                          PID:741
                                                        • /usr/local/sbin/grep
                                                          grep -E -i " avx512f( |\$)"
                                                          2⤵
                                                            PID:741
                                                          • /usr/local/bin/grep
                                                            grep -E -i " avx512f( |\$)"
                                                            2⤵
                                                              PID:741
                                                            • /usr/sbin/grep
                                                              grep -E -i " avx512f( |\$)"
                                                              2⤵
                                                                PID:741
                                                              • /usr/bin/grep
                                                                grep -E -i " avx512f( |\$)"
                                                                2⤵
                                                                  PID:741
                                                                • /sbin/grep
                                                                  grep -E -i " avx512f( |\$)"
                                                                  2⤵
                                                                    PID:741
                                                                  • /bin/grep
                                                                    grep -E -i " avx512f( |\$)"
                                                                    2⤵
                                                                      PID:741
                                                                    • /usr/bin/lscpu
                                                                      lscpu
                                                                      2⤵
                                                                      • Checks system information (zLinux)
                                                                      • Checks CPU configuration
                                                                      • Reads CPU attributes
                                                                      • Enumerates kernel/hardware configuration
                                                                      • Reads runtime system information
                                                                      PID:742
                                                                    • /bin/egrep
                                                                      egrep -i " avx2( |\$)"
                                                                      2⤵
                                                                        PID:743
                                                                      • /usr/local/sbin/grep
                                                                        grep -E -i " avx2( |\$)"
                                                                        2⤵
                                                                          PID:743
                                                                        • /usr/local/bin/grep
                                                                          grep -E -i " avx2( |\$)"
                                                                          2⤵
                                                                            PID:743
                                                                          • /usr/sbin/grep
                                                                            grep -E -i " avx2( |\$)"
                                                                            2⤵
                                                                              PID:743
                                                                            • /usr/bin/grep
                                                                              grep -E -i " avx2( |\$)"
                                                                              2⤵
                                                                                PID:743
                                                                              • /sbin/grep
                                                                                grep -E -i " avx2( |\$)"
                                                                                2⤵
                                                                                  PID:743
                                                                                • /bin/grep
                                                                                  grep -E -i " avx2( |\$)"
                                                                                  2⤵
                                                                                    PID:743
                                                                                  • /bin/egrep
                                                                                    egrep -i " avx( |\$)"
                                                                                    2⤵
                                                                                      PID:746
                                                                                    • /usr/bin/lscpu
                                                                                      lscpu
                                                                                      2⤵
                                                                                      • Checks system information (zLinux)
                                                                                      • Checks CPU configuration
                                                                                      • Reads CPU attributes
                                                                                      • Enumerates kernel/hardware configuration
                                                                                      • Reads runtime system information
                                                                                      PID:745
                                                                                    • /usr/local/sbin/grep
                                                                                      grep -E -i " avx( |\$)"
                                                                                      2⤵
                                                                                        PID:746
                                                                                      • /usr/local/bin/grep
                                                                                        grep -E -i " avx( |\$)"
                                                                                        2⤵
                                                                                          PID:746
                                                                                        • /usr/sbin/grep
                                                                                          grep -E -i " avx( |\$)"
                                                                                          2⤵
                                                                                            PID:746
                                                                                          • /usr/bin/grep
                                                                                            grep -E -i " avx( |\$)"
                                                                                            2⤵
                                                                                              PID:746
                                                                                            • /sbin/grep
                                                                                              grep -E -i " avx( |\$)"
                                                                                              2⤵
                                                                                                PID:746
                                                                                              • /bin/grep
                                                                                                grep -E -i " avx( |\$)"
                                                                                                2⤵
                                                                                                  PID:746
                                                                                                • /usr/bin/lscpu
                                                                                                  lscpu
                                                                                                  2⤵
                                                                                                  • Checks system information (zLinux)
                                                                                                  • Checks CPU configuration
                                                                                                  • Reads CPU attributes
                                                                                                  • Enumerates kernel/hardware configuration
                                                                                                  • Reads runtime system information
                                                                                                  PID:747
                                                                                                • /bin/egrep
                                                                                                  egrep -i " sse4_2( |\$)"
                                                                                                  2⤵
                                                                                                    PID:748
                                                                                                  • /usr/local/sbin/grep
                                                                                                    grep -E -i " sse4_2( |\$)"
                                                                                                    2⤵
                                                                                                      PID:748
                                                                                                    • /usr/local/bin/grep
                                                                                                      grep -E -i " sse4_2( |\$)"
                                                                                                      2⤵
                                                                                                        PID:748
                                                                                                      • /usr/sbin/grep
                                                                                                        grep -E -i " sse4_2( |\$)"
                                                                                                        2⤵
                                                                                                          PID:748
                                                                                                        • /usr/bin/grep
                                                                                                          grep -E -i " sse4_2( |\$)"
                                                                                                          2⤵
                                                                                                            PID:748
                                                                                                          • /sbin/grep
                                                                                                            grep -E -i " sse4_2( |\$)"
                                                                                                            2⤵
                                                                                                              PID:748
                                                                                                            • /bin/grep
                                                                                                              grep -E -i " sse4_2( |\$)"
                                                                                                              2⤵
                                                                                                                PID:748
                                                                                                              • /usr/bin/lscpu
                                                                                                                lscpu
                                                                                                                2⤵
                                                                                                                • Checks system information (zLinux)
                                                                                                                • Checks CPU configuration
                                                                                                                • Reads CPU attributes
                                                                                                                • Enumerates kernel/hardware configuration
                                                                                                                • Reads runtime system information
                                                                                                                PID:749
                                                                                                              • /bin/egrep
                                                                                                                egrep -i " vaes( |\$)"
                                                                                                                2⤵
                                                                                                                  PID:750
                                                                                                                • /usr/local/sbin/grep
                                                                                                                  grep -E -i " vaes( |\$)"
                                                                                                                  2⤵
                                                                                                                    PID:750
                                                                                                                  • /usr/local/bin/grep
                                                                                                                    grep -E -i " vaes( |\$)"
                                                                                                                    2⤵
                                                                                                                      PID:750
                                                                                                                    • /usr/sbin/grep
                                                                                                                      grep -E -i " vaes( |\$)"
                                                                                                                      2⤵
                                                                                                                        PID:750
                                                                                                                      • /usr/bin/grep
                                                                                                                        grep -E -i " vaes( |\$)"
                                                                                                                        2⤵
                                                                                                                          PID:750
                                                                                                                        • /sbin/grep
                                                                                                                          grep -E -i " vaes( |\$)"
                                                                                                                          2⤵
                                                                                                                            PID:750
                                                                                                                          • /bin/grep
                                                                                                                            grep -E -i " vaes( |\$)"
                                                                                                                            2⤵
                                                                                                                              PID:750
                                                                                                                            • /usr/bin/lscpu
                                                                                                                              lscpu
                                                                                                                              2⤵
                                                                                                                              • Checks system information (zLinux)
                                                                                                                              • Checks CPU configuration
                                                                                                                              • Reads CPU attributes
                                                                                                                              • Enumerates kernel/hardware configuration
                                                                                                                              • Reads runtime system information
                                                                                                                              PID:751
                                                                                                                            • /bin/egrep
                                                                                                                              egrep -i " aes(_ni|-ni)?( |\$)"
                                                                                                                              2⤵
                                                                                                                                PID:752
                                                                                                                              • /usr/local/sbin/grep
                                                                                                                                grep -E -i " aes(_ni|-ni)?( |\$)"
                                                                                                                                2⤵
                                                                                                                                  PID:752
                                                                                                                                • /usr/local/bin/grep
                                                                                                                                  grep -E -i " aes(_ni|-ni)?( |\$)"
                                                                                                                                  2⤵
                                                                                                                                    PID:752
                                                                                                                                  • /usr/sbin/grep
                                                                                                                                    grep -E -i " aes(_ni|-ni)?( |\$)"
                                                                                                                                    2⤵
                                                                                                                                      PID:752
                                                                                                                                    • /usr/bin/grep
                                                                                                                                      grep -E -i " aes(_ni|-ni)?( |\$)"
                                                                                                                                      2⤵
                                                                                                                                        PID:752
                                                                                                                                      • /sbin/grep
                                                                                                                                        grep -E -i " aes(_ni|-ni)?( |\$)"
                                                                                                                                        2⤵
                                                                                                                                          PID:752
                                                                                                                                        • /bin/grep
                                                                                                                                          grep -E -i " aes(_ni|-ni)?( |\$)"
                                                                                                                                          2⤵
                                                                                                                                            PID:752
                                                                                                                                          • /usr/bin/lscpu
                                                                                                                                            lscpu
                                                                                                                                            2⤵
                                                                                                                                            • Checks system information (zLinux)
                                                                                                                                            • Checks CPU configuration
                                                                                                                                            • Reads CPU attributes
                                                                                                                                            • Enumerates kernel/hardware configuration
                                                                                                                                            • Reads runtime system information
                                                                                                                                            PID:753
                                                                                                                                          • /bin/egrep
                                                                                                                                            egrep -i " sha(_ni)?( |\$)"
                                                                                                                                            2⤵
                                                                                                                                              PID:754
                                                                                                                                            • /usr/local/sbin/grep
                                                                                                                                              grep -E -i " sha(_ni)?( |\$)"
                                                                                                                                              2⤵
                                                                                                                                                PID:754
                                                                                                                                              • /usr/local/bin/grep
                                                                                                                                                grep -E -i " sha(_ni)?( |\$)"
                                                                                                                                                2⤵
                                                                                                                                                  PID:754
                                                                                                                                                • /usr/sbin/grep
                                                                                                                                                  grep -E -i " sha(_ni)?( |\$)"
                                                                                                                                                  2⤵
                                                                                                                                                    PID:754
                                                                                                                                                  • /usr/bin/grep
                                                                                                                                                    grep -E -i " sha(_ni)?( |\$)"
                                                                                                                                                    2⤵
                                                                                                                                                      PID:754
                                                                                                                                                    • /sbin/grep
                                                                                                                                                      grep -E -i " sha(_ni)?( |\$)"
                                                                                                                                                      2⤵
                                                                                                                                                        PID:754
                                                                                                                                                      • /bin/grep
                                                                                                                                                        grep -E -i " sha(_ni)?( |\$)"
                                                                                                                                                        2⤵
                                                                                                                                                          PID:754
                                                                                                                                                        • /tmp/cpuminer-gr-avx2-1.2.4.1/bin/binaries/cpuminer-sse2
                                                                                                                                                          /tmp/cpuminer-gr-avx2-1.2.4.1/bin/binaries/cpuminer-sse2 "--config=/tmp/cpuminer-gr-avx2-1.2.4.1/bin/config.json"
                                                                                                                                                          2⤵
                                                                                                                                                            PID:755

                                                                                                                                                        Network

                                                                                                                                                              MITRE ATT&CK Enterprise v16

                                                                                                                                                              Replay Monitor

                                                                                                                                                              Loading Replay Monitor...

                                                                                                                                                              Downloads