General

  • Target

    2025-03-30_d28cce1be08fcdbb1aa2d4a80e950985_aspxspy_black-basta_poison-ivy_xmrig

  • Size

    2.4MB

  • MD5

    d28cce1be08fcdbb1aa2d4a80e950985

  • SHA1

    f3d657cab48bdfa3a8057a3a6cd54f6a15cbb908

  • SHA256

    fc9da4c2723f221c0ed180e6b662b29bcc43bb01fc48cce307b06ff3bc1cc492

  • SHA512

    254d45a0e310393b81041ccac52b3c089add70ff84e9d63b69a0f9a83a254af654379c93e2b1b0372a3bb7713495b5e5fe0055b1aef89042c2ed3689012f7fc3

  • SSDEEP

    49152:w0wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjcz8Dze7jcmWHfiB:w0GnJMOWPClFdx6e0EALKWVTffZiPAco

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2025-03-30_d28cce1be08fcdbb1aa2d4a80e950985_aspxspy_black-basta_poison-ivy_xmrig
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections