Trojan.SH.MALXMR.UWEKI

It arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.

Detalles de entrada

It arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.

Instalación

Infiltra los archivos siguientes:

• {Malware Path}\out.txt -> List of Docker servers with open ports

Otros detalles

Hace lo siguiente:

• Uses masscan to search for vulnerable Docker servers
• Uses a container from {BLOCKED}mk/alpine2 to install and execute the cryptominer from the official XMRIG github repository.