Remove Malicious Crypto Mining Code

My Ubuntu-based Linux server has started maxing out its CPU and memory, and the monitoring dashboard confirms the spikes are constant. Everything points to a hidden crypto-mining payload. I need a security-minded admin who can jump in quickly, trace the malicious processes, wipe every related file, and close whatever door was used to plant them.
I will provide SSH access (root or sudo as needed) along with the original alert logs so you can reproduce the symptoms.

Please be thorough: scan the entire file-system, investigate running services, cron jobs, startup scripts, containers—anything that could relaunch the miner. Once clean, harden the box by patching packages, tightening SSH, and adjusting firewall rules so the problem does not return.

Deliverables
• Clean server with all mining code, binaries, and persistence hooks fully removed
• Brief security hardening checklist applied and documented
• Log/report summarising what you found, what you removed, and recommendations for ongoing monitoring

I value clear communication and expect periodic updates while you work so we can get the server back to normal as fast as possible.