COINMINER.LINUX.KORKERDS.AB

This Coinminer arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.

It uses the system's central processing unit (CPU) and/or graphical processing unit (GPU) resources to mine cryptocurrency.

Arrival Details

This Coinminer arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.

Other Details

This Coinminer does the following:

• It uses the following details for its coin mining routine:
  • Algorithim"cryptonight"
  • Username:"46FtfupUcayUCqG7Xs7YHREgp4GW3CGvLN4aHiggaYd75WvHM74Tpg1FVEM8fFHFYDSabM3rPpNApEBY4Q4wcEMd3BM4Ava.ten_y"
  • Password: "CN2"
  • URLs: {BLOCKED}m+tcp://{BLOCKED}.{BLOCKED}mr.ru:56415
• Connects to the following URL as part of its coin mining routine:
  • {BLOCKED}m+tcp://{BLOCKED}.{BLOCKED}mr.ru:56415

It accepts the following parameters:

• • -h, --help -> show help
  • -v, --version ->show version number
  • -V, --version-long ->show long version number
  • -c, --config FILE ->common miner configuration file
  • -C, --poolconf FILE ->pool configuration file
  • --benchmark BLOCKVERSION ->ONLY do a benchmark and exit
  • --benchwait WAIT_SEC -> benchmark wait time
  • --benchwork WORK_SEC ->benchmark work time
  • --noCPU -> disable the CPU miner backend
  • --cpu FILE ->CPU backend miner config file
• The following options can be used for automatic start without a guided config, If config exists then this pool will be top priority.
  • -o, --url URL ->pool url and port, e.g. {BLOCKED}.{BLOCKED}ool.com:3333
  • -O, --tls-url URL ->TLS pool url and port, e.g. {BLOCKED}.{BLOCKED}ool.com:10443
  • -u, --user USERNAME ->pool user name or wallet address
  • -r, --rigid RIGID ->rig identifier for pool-side statistics (needs pool support)
  • -p, --pass PASSWD ->pool password, in the most cases x or empty ""
  • --use-nicehash ->the pool should run in nicehash mode
  • --currency NAME ->currency to mine
• Supported coin options:
  • - aeon7
  • - bbscoin
  • - bittube
  • - cryptonight
  • - cryptonight_bittube2
  • - cryptonight_masari
  • - cryptonight_haven
  • - cryptonight_heavy
  • - cryptonight_lite
  • - cryptonight_lite_v7
  • - cryptonight_lite_v7_xor
  • - cryptonight_v7
  • - cryptonight_v7_stellite
  • - graft
  • - haven
  • - intense
  • - masari
  • - monero7
  • - ryo
  • - stellite
  • - turtlecoin

It uses the system's central processing unit (CPU) and/or graphical processing unit (GPU) resources to mine cryptocurrency. This behavior makes the system run abnormally slow.