General

  • Target

    031e1e5ba948b6b5e7b9c1f5fda934bec63815d2861de942ee131013126a1afd.zip

  • Size

    3KB

  • MD5

    74c16e55cb10770f41ef741a38486b33

  • SHA1

    795acd324fb8b33feee978399c1dd28a4c8bf852

  • SHA256

    d17810e45ff1c9b40a98273f63287c26780710764262ed23e52dba48584f010e

  • SHA512

    d768b8504bb4190db21e7943e10b9dfe82246a720a7cc7ad5cf1705e1152c775223b08568181bc4589b36e3813f1b3012b3eeabac0c3423cca9cb693ce61a1dd

Malware Config

Extracted

Family

icedid

Botnet

1287668524

C2

greshman.xyz

vopnoz.com

bleizcarsgood.com

Attributes
  • auth_var

    3

  • url_path

    /news/

Signatures

Files

  • 031e1e5ba948b6b5e7b9c1f5fda934bec63815d2861de942ee131013126a1afd.zip
    .zip

    Password: infected

  • 031e1e5ba948b6b5e7b9c1f5fda934bec63815d2861de942ee131013126a1afd.dll
    .dll windows x64

    85ac0c1907b9e6e445f0962af21556f5


    Headers

    Imports

    Exports

    Sections