MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 9cf853a49247acca754c25d21af5eb2c8ae079c658b89e752e7888aa64ba21e9. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


CoinMiner


Vendor detections: 5


Intelligence 5 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 9cf853a49247acca754c25d21af5eb2c8ae079c658b89e752e7888aa64ba21e9
SHA3-384 hash: 1cc4d79023ba0043a5921c139c21493302ce0af58eaeae3a079d444e6f2e45702749cc2d2094632bc7d68736065cd09a
SHA1 hash: adb5ecaf1cca412e767eaef5a229b7872c70a6b6
MD5 hash: 39fbb163c74178ee85c14570886bb196
humanhash: cardinal-undress-thirteen-illinois
File name:xmrig-6.10.0-linux-static-x64.tar.gz
Download: download sample
Signature CoinMiner
Create hunting rule
File size:2'517'243 bytes
First seen:2022-03-31 12:14:41 UTC
Last seen:2022-04-19 21:06:34 UTC
File type: gz
MIME type:application/gzip
ssdeep 49152:Nip6YBO6CYFq+ySLSF9js73xtzdx8iaDWw8tlz3xW8Uf1vn96CKFLgwlFW3sXyRI:N7BYFqMeszVxrSWw8tRBkPQCOzlFWci+
TLSH T197C533295361F197F1049DA7D1A2BE5AA423786F0D33C93200EF1F9B3AFD9417620AD9
Reporter tolisec
Tags:CoinMiner gz miner

Intelligence

File Origin
# of uploads :
3
# of downloads :
531
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
SecuriteInfo.com.PUA.Tool.BtcMine.2562.11613.20545.UNOFFICIAL
Create hunting rule

Unix.Trojan.Generic-9917199-0
Create hunting rule

Unix.Trojan.Generic-9919438-0
Create hunting rule

PUA.Unix.Coinminer.XMRig-6683890-0
Create hunting rule

Multios.Coinminer.Miner-6781728-2
Create hunting rule

Verdict:
No Threat
Threat level:
  10/10
Confidence:
100%
Link:
https://www.filescan.io/uploads/62459b549253b276b7b34cec/reports/a24f3b3d-0716-4a07-b6b9-8061e552caa1/overview
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/9cf853a49247acca754c25d21af5eb2c8ae079c658b89e752e7888aa64ba21e9/
Threat name:
Linux.Coinminer.BitCoinMiner
Create hunting rule
Status:
Malicious
First seen:
2021-03-10 01:19:22 UTC
File Type:
Binary (Archive)
Extracted files:
4
AV detection:
26 of 42 (61.90%)
Threat level:
  4/5
Result
Malware family:
xmrig
Create hunting rule
Score:
  10/10
Tags:
family:xmrig linux miner
Link:
https://tria.ge/reports/220331-pewfmsbfg3/
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
CryptoFortress
Score:
1.00
Link:
https://yomi.yoroi.company/submissions/9cf853a49247acca754c25d21af5eb2c8ae079c658b89e752e7888aa64ba21e9

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Web download

CoinMiner

gz 9cf853a49247acca754c25d21af5eb2c8ae079c658b89e752e7888aa64ba21e9

(this sample)

  
URLhaus
https://urlhaus.abuse.ch/url/2124302/
  
Delivery method
Distributed via web download

Comments