General

  • Target

    NEAS.2023-09-27_afd8560786fb1923c4bff24e5041f610_backswap_icedid_xmrig_JC.exe

  • Size

    12.6MB

  • MD5

    afd8560786fb1923c4bff24e5041f610

  • SHA1

    f455e2882282bfbe9d9406d9eac97be4aad46079

  • SHA256

    8309fae68894becbee0248ecf79d99dd0ae06b95688337bc8dac4372c37a632c

  • SHA512

    1bcd209bc014ee85ea6da6f325378decd1f4bff76dfecfc64175e37e9f4f2f1abc6d0136b4b0ef23e70dbe55a4e6cb23f0c812c9bd2c6073c39c320e631773b9

  • SSDEEP

    196608:da9+6Y7SOEibgRavDllryzPpCPa937PVOTa9+6Y7SOEibgRb:dFgRavDllryzPpIYh+FgRb

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.2023-09-27_afd8560786fb1923c4bff24e5041f610_backswap_icedid_xmrig_JC.exe
    .exe windows:4 windows x86


    Headers

    Sections