Indicators of Compromise (IoCs)  SHA256 Description Detection Name 1800de5f0fb7c5ef3c0d9787260ed61bc324d861bc92d9673d4737d1421972aa Cryptocurrency miner Trojan.SH.MALXMR.UWEJP b68bd3a54622792200b931ee5eebf860acf8b24f4b338b5080193573a81c747d Shellbot Backdoor.SH.SHELLBOT.AA 620635aa9685249c87ead1bb0ad25b096714a0073cfd38a615c5eb63c3761976 Tool Trojan.Linux.SSHBRUTE.B fc57bd66c27066104cd6f8962cd463a5dfc05fa59b76b6958cddd3542dfe6a9a Cryptocurrency miner Coinminer.Linux.MALXMR.SMDSL32 649280bd4c5168009c1cff30e5e1628bcf300122b49d339e3ea3f3b6ff8f9a79 Cryptocurrency miner Coinminer.Linux.MALXMR.SMDSL64   URLs  159[.]203[.]141[.]208  104[.]236[.]192[.]6  45[.]9[.]148[.]129:80      Miner pool  45[.]9[.]148[.]125:80       Miner pool  http://www[.]minpop[.]com/sk12pack/idents.php         Command and control  http://www[.]minpop[.]com/sk12pack/names.php          Command and control      MITRE ATT&CK Matrix        Tags  Malware | APT & Targeted Attacks | Endpoints | IoT | Research | Network