“The rootkit component of the cryptocurrency-mining malware is a slightly modified/repurposed version of a publicly available code.
source https://www.google.com/url?rct=j&sa=t&url=http://www.jumesamedina.com/tobzzzpeo/qzivurefd.php%3Fuykftdrg%3Dcryptocurrency-software-download&ct=ga&cd=CAIyGmM2Nzk3ODA2ZWViNjVjODI6Y29tOmVuOlVT&usg=AFQjCNHSC2c3DuanSsWZz3AOHZgRnuS5FA