General
- Target poop.elf
- Size 1.2MB
- Sample260812-rh2syadb74
- SHA256 4ff0d26f403c3e86688cd553d1bf39d1f45dc4e2354531ca9167ee6464546d60
Score
10/10
Malware Config
Targets
-
- Target poop.elf
- Size 1.2MB
- SHA256 4ff0d26f403c3e86688cd553d1bf39d1f45dc4e2354531ca9167ee6464546d60
Score10/10Family: xmrig
XMRig is a high performance, open source, cross platform CPU/GPU miner.
XMRig Miner payload
Executes dropped EXE
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
Checks hardware identifiers (DMI)
Checks DMI information which indicate if the system is a virtual machine.
Enumerates running processes
Discovers information about currently running processes on the system
Reads hardware information
Accesses system info like serial numbers, manufacturer names etc.
UPX packed file
Detects executables packed with UPX/modified UPX open source packer.