TrendLabs: Monero Miner-Malware Uses RADMIN, MIMIKATZ to Infect, Propagate via Vulnerability

Figure 1. Monero cryptocurrency mining-malware routine using RADMIN and MIMIKATZ.

REF: https://blog.trendmicro.com/trendlabs-security-intelligence/monero-miner-malware-uses-radmin-mimikatz-to-infect-propagate-via-vulnerability/