General
- Target 66fba433a2dad78c25b2e7ba7b721a7211c2c3fb59c2a1790a39bd6dc06bf899
- Size 6KB
- Sample260831-285bvsaf37
- SHA256 66fba433a2dad78c25b2e7ba7b721a7211c2c3fb59c2a1790a39bd6dc06bf899
Score
10/10
Malware Config
Targets
-
- Target 66fba433a2dad78c25b2e7ba7b721a7211c2c3fb59c2a1790a39bd6dc06bf899
- Size 6KB
- SHA256 66fba433a2dad78c25b2e7ba7b721a7211c2c3fb59c2a1790a39bd6dc06bf899
Score10/10-
Family: xmrig
XMRig is a high performance, open source, cross platform CPU/GPU miner.
-
Family: xmrig
XMRig is a high performance, open source, cross platform CPU/GPU miner.
-
XMRig Miner payload
-
Cryptocurrency Miner
Makes network request to known mining pool URL.
-
Executes dropped EXE
-
Checks hardware identifiers (DMI)
Checks DMI information which indicate if the system is a virtual machine.
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Modifies systemd
Adds/ modifies systemd service files. Likely to achieve persistence.
-
Reads hardware information
Accesses system info like serial numbers, manufacturer names etc.
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1XDG Autostart Entries
1Create or Modify System Process
1Systemd Service
1Privilege Escalation
Boot or Logon Autostart Execution
1XDG Autostart Entries
1Create or Modify System Process
1Systemd Service
1