star7th / star7th/coolmonitor

被挖矿

Open
#62 1 comment 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Dominant language
TypeScript
Stars
877
Forks
107
PR merge metrics
No merged PRs in 30d

Description

文件路径
/proc/15537/root/var/tmp/xmrig-6.24.0/xmrig
恶意文件MD5
72a37a2fa588e013eafd695b8b5b0e61
恶意文件SHA256
0c748b9e8bc6b5b4fe989df67655f3301d28ef81617b9cbe8e0f6a19d4f9b657
扫描来源方式
进程启动扫描
检测方式
云查杀
进程ID
3949758
进程命令行
/var/tmp/xmrig-6.24.0/xmrig --url auto.c3pool.org:443 --user 8Bt9BEG98SbBPNTp1svQtDQs7PMztqzGoNQHo58eaUYdf8apDkbzp8HbLJH89fMzzciFQ7fb4ZiqUbymDZR6S9asKHZR6wn --pass WUZHRg8bHgodBwAGHwADBxsGAAQJBQYHAh0= --donate-level 0
文件创建用户
N/A
文件修改时间
2025-06-23 08:46:27
样本家族与特征
Miner:Linux/CoinMiner
源文件下载
下载
容器名
coolmonitor
容器ID
665112c34ef79723cef931034ac9ece48e5bc7e04fbaaed7d3280683208568c4
镜像ID
star7th/coolmonitor@sha256:8b2ee844bc46731544779c31542be1f751703fdd8da8d55ec2d7a154cf19bb8b
镜像名
star7th/coolmonitor:latest
容器视角文件路径
/var/tmp/xmrig-6.24.0/xmrig

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start by reviewing the reported container name, image ID, image name, process path, and mining command line in the issue. Confirm how the xmrig process entered the container and define the remediation and verification criteria; no source file or test is identified in the report.

Written by the indexing model from the issue text.

Assessment

Tech stack
docker
Domain
infrastructure, security
Issue type
Bug
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
15/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.