[Intel]: https://www.fortinet.com/blog/threat-research/rocke-variant-ready-to-box-mining-challengers

[timb-machine]

Area

Malware reports

Parent threat

Resource Development, Initial Access, Execution, Persistence, Privilege Escalation, Defense Evasion, Impact

Finding

https://www.fortinet.com/blog/threat-research/rocke-variant-ready-to-box-mining-challengers

Industry reference

attack:T1496:Resource Hijacking attack:T1608:Stage Capabilities attack:T1053.003:Cron attack:T1027.002:Software Packing attack:T1543.002:Systemd Service attack:T1037.004:RC Scripts attack:T1574.006:Dynamic Linker Hijacking attack:T1036.005:Match Legitimate Name or Location attack:T1190:Exploit Public-Facing Application attack:T1110:Brute Force uses:KillCompetition

Malware reference

XMRig

Actor reference

Rocke

Component

Linux

Scenario

No response