blackmoon | 2024-11-24_4eded49550a48bb422420c96f306dca9_hijackloader_icedid_xmrig

General

Target

2024-11-24_4eded49550a48bb422420c96f306dca9_hijackloader_icedid_xmrig
Size

6.0MB
MD5

4eded49550a48bb422420c96f306dca9
SHA1

65c42fe750e29c6dbb299597344154de6dece454
SHA256

d0149bb7256574ac9bc6d92332d43f4a9e798046fab7eb5c02ee12d66e4d8d87
SHA512

a907c0205a099da301be42859baea32e66b866af7d359f20aec8c918298ce5a731130e594dd8b2d926cb8591918d3a0e7a1095e53aa59f9619654a6937f66cba
SSDEEP

98304:dvfapmo1Y4+6Y7SOEfX/SbgRlL8IuBK+JLs0oAaldmdmnp:da9+6Y7SOEibgRHuE+3Kmd0

Score

10^/10

Blackmoon family
blackmoon
Detect Blackmoon payload 1 IoCs

Processes:

resource yara_rule

sample family_blackmoon
XMRig Miner payload 1 IoCs
miner

Processes:

resource yara_rule

sample xmrig
Xmrig family
xmrig

resource	yara_rule
sample	family_blackmoon

resource	yara_rule
sample	xmrig

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
2024-11-24_4eded49550a48bb422420c96f306dca9_hijackloader_icedid_xmrig