Systemcore.exe CPU Miner

Threat Scorecard

Threat Level: 80 % (High)
Infected Computers: 171
First Seen: October 20, 2017
Last Seen: August 20, 2022
OS(es) Affected: Windows

The Systemcore.exe CPU Miner is a program that is recorded to be used in threat campaigns that aim to use computation resources on compromised machines and earn money for its operators. The Systemcore.exe CPU Miner may be delivered as a Trojan to potential targets by incorporating the program into software bundles and fake update packages for Adobe Flash and Java. As its name suggests, the Systemcore.exe Miner hijacks your CPU power to mine digital currencies and earn revenue for those who are operating the app remotely. The Systemcore.exe CPU Miner Trojan can be installed on machines via compromised remote desktop accounts too. It is difficult to say who is behind the Systemcore.exe CPU Miner network because the threat actors are using the TOR network to hide their IP addresses and identity. A focus on developing programs like the Systemcore.exe CPU Miner is observed with the rise of the value attributed to cryptocurrencies like Monero, Bitcoin, Siacoin and others.

The Systemcore.exe CPU Miner functions identically to the VMProtect Miner Trojan and the IntelService.exe CPU Miner. The program adds a startup entry in the MSCONFIG utility and loads as soon as Windows boots. The Systemcore.exe CPU Miner is recorded to hijack a little more than 70% of the processing power on infected devices. Browsing the Web, opening programs, switching between windows and playing games on systems infected by the Systemcore.exe CPU Miner is not likely to be satisfactory. Computer security experts encourage users to use a trusted anti-malware solution that can eliminate the Systemcore.exe CPU Miner Trojan and prevent unauthorized remote access to your PC. AV engines are known to tag objects created by the Systemcore.exe CPU Miner as:

  • Trojan.GenericKD.6093644
  • TR/Delf.Agent.jrewq
  • W32/Trojan.IYXQ-8965
  • Trojan ( 00518a991 )
  • GenericR-KOZ!626F6FD823C6
  • TROJ_GEN.R001C0OJD17
  • Trojan.Win32.Z.Delf.4527616.A
  • Trojan.Delf.Win32.100726

Trending

Most Viewed

Loading...