Back to Malware Drops
6731b2b5441e4782b8ca3a373a610993c049860e5afa862b9950d58060b0dcfe
MD514778765c6a45dafaaed2fba2c7b4523
SSDEEP384:G6CEHeJbHG60H+I0lMtJyjiKH6DUqBuRyRG+o1SS48WG0l1XDs/tN:G6C4eHG60H9PEiKH6DRuRyRG+oQ1nGy8
File Typetext/x-script
Size13.5 KB
Sources75
Downloads0
First SeenApr 20, 2024
Last SeenApr 24, 2024
Download sample (.zip, password: infected)
Live malware — handle only in an isolated analysis environment.
Indicators of Compromise
Values are defanged (e.g. hxxp://, [.]) — not live links.
domain (12)
- auto[.]c3pool[.]org
- c3pool[.]com
- config[.]json
- download[.]c3pool[.]org
- github[.]com
- miner[.]sh
- multi-user[.]target
- rc[.]local
- sysctl[.]conf
- xenial-x64[.]tar[.]gz
- xmrig[.]log
- xmrig[.]tar[.]gz
email (1)
- support@c3pool[.]com
url (4)
- hxxps://c3pool[.]com
- hxxps://download[.]c3pool[.]org/xmrig_setup/raw/master/xmrig[.]tar[.]gz
- hxxps://github[.]com
- hxxps://github[.]com/xmrig/xmrig/releases/latest