General

  • Target

    2024-12-29_210955c706fdf4391967be5525726235_backswap_icedid_xmrig

  • Size

    13.1MB

  • MD5

    210955c706fdf4391967be5525726235

  • SHA1

    dd7b1850731250993f75834f39a88741702bc3ea

  • SHA256

    52818748521ef947604626ead8677ef358ddd9b6c8f57ffe5d2b90efaeee44a2

  • SHA512

    7f6b2a03f43ecf31b095024f9d8039ce4022d0e3ba7603ed0bf1ade700d14b698d9b75e0f23f9238cbb2d9cb2feba7c0e05c42fa4027b9dd81e8c7363556b095

  • SSDEEP

    196608:da9+6Y7SOEibgRavvghWyzPpCLC1AZPzmGP8O7PVP:dFgRav6WyzPpeC1nGrhP

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-12-29_210955c706fdf4391967be5525726235_backswap_icedid_xmrig
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections