General
- Target 198a7d21faa1e489855ec22043720b6b3cab62bd9c95e66d55058ae4af131e56
- Size 16KB
- Sample261027-ea7b8sas8y
- SHA256 198a7d21faa1e489855ec22043720b6b3cab62bd9c95e66d55058ae4af131e56
Score
10/10
Malware Config
Targets
-
- Target 198a7d21faa1e489855ec22043720b6b3cab62bd9c95e66d55058ae4af131e56
- Size 16KB
- SHA256 198a7d21faa1e489855ec22043720b6b3cab62bd9c95e66d55058ae4af131e56
Score10/10Family: xmrig
XMRig is a high performance, open source, cross platform CPU/GPU miner.
XMRig Miner payload
File and Directory Permissions Modification
Adversaries may modify file or directory permissions to evade defenses.
Executes dropped EXE
Checks hardware identifiers (DMI)
Checks DMI information which indicate if the system is a virtual machine.
Reads hardware information
Accesses system info like serial numbers, manufacturer names etc.
MITRE ATT&CK Enterprise v16
Defense Evasion
File and Directory Permissions Modification
1Linux and Mac File and Directory Permissions Modification
1Virtualization/Sandbox Evasion
2System Checks
2