Analysis date (UTC): 17 April 2024, 12:29Analysis environment: Ubuntu 22.04.2

nm-inet-dialog

MD5:6F4B17764B0ADDC47EA1393C7A12C689
SHA1:07BEB5277AEBAB37DBAC811EEE531395CF968433
SHA256:2D96BF6E392BBD29C2D13F6393410E4599A40E1F2FE9DC8A7B744D11F05EB756

Analysis result

Behavior activities

MALICIOUS

No malicious indicators.

SUSPICIOUS

Executes commands using command-line interpreter

  • nm-inet-dialog.o (PID: 9313)
  • cron (PID: 9326)
  • bash (PID: 9308)

Modifies file or directory owner

  • sudo (PID: 9302)

Checks the user who created the process

  • cron (PID: 9326)

INFO

No info indicators.

Threats

PIDProcessClassMessage
——Potential Corporate Privacy ViolationAV POLICY NiceHash Miner Subscribing To Pool
——Crypto Currency Mining Activity DetectedET COINMINER W32/BitCoinMiner.MultiThreat Subscribe/Authorize Stratum Protocol Message

ANY.RUN is an interactive service which provides full access to the guest system. Information in this report could be distorted by user actions and is provided for user acknowledgement as it is. ANY.RUN does not guarantee maliciousness or safety of the content.

Interactive malware hunting service ANY.RUN