sustes miner
- First seen
- 2018-01-01 00:00:00
- Malware type
- cryptominer, downloader
- Profile updated
- 2026-07-07 14:30:26
Targeted industries: technology-and-telecommunications energy-and-utilities
Context
Sustes Malware doesn’t infect victims by itself (it’s not a worm) but it is spread over exploitation and brute-force activities with special focus on IoT and Linux servers. The initial infection stage comes from a custom wget directly on the victim machine followed by a simple /bin/bash mr.sh. The script is a simple bash script which drops and executes additional software.
Reports & references
- malpedia.caad.fkie.fraunhofer.de — Elf.Sustes (report)
- marcoramilli.com — Sustes Malware Cpu For Monero (report)