General
- Target put.sh
- Size 1KB
- Sample261021-qnzebsfc35
- SHA256 f1ad8c4763b29b151b84f2a474708d1a75a1928151e732ea5523f46a9003fe7e
Score
10/10
Malware Config
Targets
-
- Target put.sh
- Size 1KB
- SHA256 f1ad8c4763b29b151b84f2a474708d1a75a1928151e732ea5523f46a9003fe7e
Score10/10Family: xmrig
XMRig is a high performance, open source, cross platform CPU/GPU miner.
Family: xmrig
XMRig is a high performance, open source, cross platform CPU/GPU miner.
XMRig Miner payload
File and Directory Permissions Modification
Adversaries may modify file or directory permissions to evade defenses.
Cryptocurrency Miner
Makes network request to known mining pool URL.
Executes dropped EXE
Checks hardware identifiers (DMI)
Checks DMI information which indicate if the system is a virtual machine.
Enumerates running processes
Discovers information about currently running processes on the system
Reads hardware information
Accesses system info like serial numbers, manufacturer names etc.
MITRE ATT&CK Enterprise v16
Defense Evasion
File and Directory Permissions Modification
1Linux and Mac File and Directory Permissions Modification
1Virtualization/Sandbox Evasion
2System Checks
2