General

  • Target

    2025-03-30_54ded23edb941cd5e9ff353c26d69e81_aspxspy_black-basta_poison-ivy_xmrig

  • Size

    2.4MB

  • MD5

    54ded23edb941cd5e9ff353c26d69e81

  • SHA1

    ef6d91420b2fc6f83ec9800450cb0a4328be1c49

  • SHA256

    9db37052c25b3fc451cd2c7b168abd1cdfba725be81a8c2bf3331a08a2c2b7a3

  • SHA512

    ac9a9737eab3a984a02be418dbc907213e7d73e7295e2973c5cab496fc0d92ac7128fc0b8044bccb94876737883200a1096c8e9308414361749ce0f7cb0840d8

  • SSDEEP

    49152:w0wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjcz8Dze7jcmWHfb:w0GnJMOWPClFdx6e0EALKWVTffZiPAct

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2025-03-30_54ded23edb941cd5e9ff353c26d69e81_aspxspy_black-basta_poison-ivy_xmrig
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections