It is sending coins of Kim Il Sung University in Pyongyang, North Korea. This software application has been discovered that code for miners has been installed. This firm has been noted that this application was made on December 24th and uses host computers to host the monorail by Alien Walt, a security firm has pointed out that North Korea is the source of cash for its victimized economy demanding.
This firm has noted that cryptocurrencies can provide a country with a financial lifeline which has become difficult with restrictions. This software is often used in malware campaigns. It was recently used in campaigns that exploited IIS servers for Monroe, Alien Walt noted that the firm noted that a North Korean IP address has been active on the Bitcoin trading site. This software can be the most recent product of efforts at the university.
Source - https://www.ccn.com/software-may-be-channeling-monero-to-north-korean-university/