Overview

overview

10

Static

static

10

syst3md

ubuntu-18.04-amd64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    syst3md
  • Size 9.0MB
  • Sample260813-pg1hdayscw
  • SHA256 504cb139bbc3d10dc2febee86d854db2b59c5aa55c6a5c49619dea4d37e1fc11
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
xmrigdiscoveryexecutionlinuxminerpersistenceprivilege_escalation

Malware Config

Targets

    • Target
      syst3md
    • Size 9.0MB
    • SHA256 504cb139bbc3d10dc2febee86d854db2b59c5aa55c6a5c49619dea4d37e1fc11
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    discoveryexecutionxmrigminerpersistenceprivilege_escalation

    • Family: xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Executes dropped EXE

    • Creates/modifies Cron job

      Cron allows running tasks on a schedule, and is commonly used for malware persistence.

      executionpersistenceprivilege_escalation

    • Writes file to system bin folder

    behavioral1

MITRE ATT&CK Enterprise v16

Tasks