W32/CryptoMiner.L!tr

description-logoAnalysis

W32/CryptoMiner.L!tr is a generic detection for a Crypto Miner trojan.
Below are some of its observed characteristics/behaviours:

  • This Crypto Mining tool appears to be based on XMRig, below is its illustration:

    • Figure 1: XMrig.



recommended-action-logoRecommended Action

  • Make sure that your FortiGate/FortiClient system is using the latest AV database.
  • Quarantine/delete files that are detected and replace infected files with clean backup copies.

Telemetry logoTelemetry

Detection Availability

FortiGate
Extended
FortiClient
Extreme
FortiAPS
FortiAPU
FortiMail
Extreme
FortiSandbox
Extreme
FortiWeb
Extreme
Web Application Firewall
Extreme
FortiIsolator
Extreme
FortiDeceptor
Extreme
FortiEDR

Version Updates

Date Version Detail
2020-09-08 80.22400 Sig Updated
2020-06-05 77.95200 Sig Updated
2020-03-10 75.86200 Sig Updated
2019-12-03 73.52800 Sig Updated
2019-11-28 73.41100 Sig Updated
2019-09-24 71.85200 Sig Added
2019-08-06 70.52400 Sig Updated
2019-05-08 68.36300 Sig Added