Loading malware…
3 distinct techniques documented for this family, organized by ATT&CK tactic.
it not only mines cryptocurrency, but can also substitute cryptowallet addresses in the clipboard
sends information about the infected machine to the C&C server, and then downloads the cryptocurrency miner and its configuration
followed by the loader of the XMRig miner, which then set about mining Monero cryptocurrency
5 indicators attributed across vendor reports, sandbox runs, and researcher write-ups. Values are masked here and available in full in Mallory.
1 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.