Overview

overview

10

Static

static

9

updated/h64

ubuntu-18.04-amd64

1

updated/run

ubuntu-18.04-amd64

3

updated/run

debian-9-armhf

3

updated/run

debian-9-mips

3

updated/run

debian-9-mipsel

3

updated/sh

ubuntu-18.04-amd64

10

User tags

Assigned on submission by the user, not by sandbox detections.

source:malwarebazaar sha256:842ab7ab49181415c8beb089851cce560ae6162149eaa6622d46123e55e69857 elf enthec gz

Sharing

Copy URL Twitter E-mail

General

  • Target
    842ab7ab49181415c8beb089851cce560ae6162149eaa6622d46123e55e69857.zip
  • Size 2.7MB
  • Sample260907-djm5aaxepe
  • SHA256 e3e58c99ee74d0097099d1c577322445e9c5702c002ae6a585a3334481616733
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
xmrigantivmdefense_evasiondiscoveryhacktoollinuxminerupx

Malware Config

Targets

    • Target
      updated/h64
    • Size 818KB
    • SHA256 7fe9d6d8b9390020862ca7dc9e69c1e2b676db5898e4bfad51d66250e9af3eaf
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral1
    • Target
      updated/run
    • Size 163B
    • SHA256 25bca5842c199c450e31e1ae213ded64c13f91f78899dd4dbc2f096033cf821b
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    behavioral2behavioral3behavioral4behavioral5
    • Target
      updated/sh
    • Size 2.4MB
    • SHA256 59dbc41f5b98c0d84fe19c18395bc661e4ff5f244c271e608fca0c60be761735
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    antivmdiscoveryxmrigminer

    • Family: xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Checks hardware identifiers (DMI)

      Checks DMI information which indicate if the system is a virtual machine.

      antivm

    • Reads hardware information

      Accesses system info like serial numbers, manufacturer names etc.

      discovery
    behavioral6

MITRE ATT&CK Enterprise v16

Tasks