General
- Target d4cdea75d3de8df6ee5b7f41170fd2cbd5869db8ca1bce54769c75c04e3e85e3
- Size 1KB
- Sample261110-2c59aabh43
- SHA256 d4cdea75d3de8df6ee5b7f41170fd2cbd5869db8ca1bce54769c75c04e3e85e3
Score
10/10
Malware Config
Targets
-
- Target d4cdea75d3de8df6ee5b7f41170fd2cbd5869db8ca1bce54769c75c04e3e85e3
- Size 1KB
- SHA256 d4cdea75d3de8df6ee5b7f41170fd2cbd5869db8ca1bce54769c75c04e3e85e3
Score10/10Family: xmrig
XMRig is a high performance, open source, cross platform CPU/GPU miner.
Family: xmrig
XMRig is a high performance, open source, cross platform CPU/GPU miner.
XMRig Miner payload
File and Directory Permissions Modification
Adversaries may modify file or directory permissions to evade defenses.
Executes dropped EXE
Checks hardware identifiers (DMI)
Checks DMI information which indicate if the system is a virtual machine.
Enumerates running processes
Discovers information about currently running processes on the system
Reads hardware information
Accesses system info like serial numbers, manufacturer names etc.
MITRE ATT&CK Enterprise v16
Defense Evasion
File and Directory Permissions Modification
1Linux and Mac File and Directory Permissions Modification
1Virtualization/Sandbox Evasion
2System Checks
2