General

  • Target

    2025-04-07_9e3b3982b668eb7b08dc85660c679075_aspxspy_black-basta_poison-ivy_xmrig

  • Size

    2.7MB

  • MD5

    9e3b3982b668eb7b08dc85660c679075

  • SHA1

    1979e4c8abc411aaea880c5d42ebe9f351e4bfd4

  • SHA256

    f7d17e1fd335982c372d75274b312c413b9de738a6b5d3d28eaac6122d11041e

  • SHA512

    7d7c69938c9c366378d962ada8f7f61e9353d11198ca0101e7282edd002f6fea77a8c6e62d22a6e9dafc95202e5bb03841528d55ff692c21eaa14afcd32367fa

  • SSDEEP

    49152:w0wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjcz8Dze7jcmWH/xDyNdHT:w0GnJMOWPClFdx6e0EALKWVTffZiPAc2

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2025-04-07_9e3b3982b668eb7b08dc85660c679075_aspxspy_black-basta_poison-ivy_xmrig
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections