fileless-elf-exec

Reported Context (2)

Python loader. The loader uses memfd, a known Linux fileless technique, and is generated using the fileless-elf-exec open-source tool. Read more about PyLoose in our blog post published last July, PyLoose in PyLoose: Wiz Details Seven Summer 2023 Cryptomining Incidents Targeting Cloud Workloads
Edited: The script was generated using the fileless-elf-exec open-source tool (thanks @Silas and vandycknick@infosec.exchange for the contribution). PyLoose Uses Python and Linux memfd to Run XMRig in Cloud Workloads

CVE (3)

Malware (7)

People (2)

MITRE ATT&CK (16)

Vendors (1)

Products (3)

Tools (5)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.