General

  • Target

    2025-04-02_d17e700228b0f08fe39827a37b70feaa_backswap_coinminer_icedid_rhadamanthys_xmrig

  • Size

    6.3MB

  • MD5

    d17e700228b0f08fe39827a37b70feaa

  • SHA1

    0be687ab640bf3ca1bcfa364a0310605fbb06c0a

  • SHA256

    6748471ddeeba4f84e9d166b5f611b64061e4a326c0b3ded2aad26f8d9220fe6

  • SHA512

    e6cb5f46fddf54a8f659068630d4a46050cb2e17834b203d0633db184c0a63989a2a8bba39e8843f0fb247c3f571a65ede50d48f90b67f942b214f145d81f035

  • SSDEEP

    98304:dvfapmo1Y4+6Y7SOEfX/SbgR/ZPYtWJy9iIua3zi7Jy9MZPYtFvDlla:da9+6Y7SOEibgR/8buaDiOM2vDlla

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2025-04-02_d17e700228b0f08fe39827a37b70feaa_backswap_coinminer_icedid_rhadamanthys_xmrig
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections