General

  • Target

    2024-01-08_e99597d70ad25a018a04f211079790b2_backswap_icedid_xmrig

  • Size

    6.3MB

  • MD5

    e99597d70ad25a018a04f211079790b2

  • SHA1

    c8380aa83fb5b8154468922657f1711f8e6bafef

  • SHA256

    595fdf3e363b52d07002c03c5e5a61af500f73850aab3e5a85743e9ea1033b75

  • SHA512

    c47be3d1d3d0536bb85e12937ef17d648ef0790d404f15be40468a4d480002d32b0d722b30797b562b3e83e259bd2a1bd7c7706636ed75d49dfdaed195529d5e

  • SSDEEP

    196608:da9+6Y7SOEibgRavDllSGBfWBGBfW8GBfWsGBfWJGBfWUMg:dFgRavDllzWGWNWdWeW8

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-01-08_e99597d70ad25a018a04f211079790b2_backswap_icedid_xmrig
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections