General

  • Target

    1596-54-0x0000000180000000-0x0000000180005000-memory.dmp

  • Size

    20KB

  • MD5

    50522c9eb6c04ea0a35c1f189c290b79

  • SHA1

    cedcf7f4b5a702b5149a4f111fa8df636053ea51

  • SHA256

    580a046ac391411ecae6e22a776fa4a1c596598964d21ee7153d64b110d8285d

  • SHA512

    8c7274dc790dbb03f0b442c874b2b995367b238bb77ac4b9350ba5e4d8c624a3f84600ebc29b62d4f1b2779dfaec853a968e5c23131cfdb8d864264055d23a06

  • SSDEEP

    96:C+npSvbQMtOvL7fzO0WtB/SaperBsp0Q8DI6QpfwZxn5:C+npObQQOv3zKfu280nR6B5

Malware Config

Extracted

Family

icedid

Botnet

3415411565

C2

antnosience.com

seaskysafe.com

otectagain.top

dilimoretast.com

Attributes
  • auth_var

    17

  • url_path

    /news/

Signatures

Files

  • 1596-54-0x0000000180000000-0x0000000180005000-memory.dmp
    .dll windows x64


    Headers

    Sections