Did ESET Aware of "Xbash"?

[khairulaizat92 9]

Hi and Good Day,

Im wondering did ESET aware of this recent malware and ransomware pack that are being reviewed in the below post?

I see that the download link are being detected malicious by eset, but some files (according to virus total) might been missed. 

Here is the link: https://researchcenter.paloaltonetworks.com/2018/09/unit42-xbash-combines-botnet-ransomware-coinmining-worm-targets-linux-windows/

The download urls are available on the site at near end of the review.

 

 

[Peter Randziak 1,130]

Hello @khairulaizat92

yes we have this threat covered.

 

Linux ones:

Linux/Xbash.A

Linux/CoinMiner.AS

Linux/TrojanDownloader.SH.BE

 

Windows ones:

PowerShell/TrojanDownloader.Agent.AWR

Win32/Spy.Agent.PKE

PowerShell/TrojanDownloader.Agent.AXD

Generik.HEFUUZS

Win64/CoinMiner.CZ

 

Regards, P.R.