Active Cryptominer: Eradicate Persistence

A cryptominer has taken hold on this host and set up three ways to relaunch itself after a kill or reboot: a cron job, a systemd service unit, and the miner binary it runs. Killing the process is not enough — it will come back until every persistence mechanism is gone. Investigate the box (start from /root/case/brief.txt), find the three artifacts, and eradicate them. Grading reads the filesystem: the cron entry, the unit file, and the binary must all be gone.