General

  • Target

    1664-54-0x0000000000110000-0x0000000000147000-memory.dmp

  • Size

    220KB

  • MD5

    fd272df98fe2ceec7a0d5d761572d7dc

  • SHA1

    84c0d9faa87b3773a6d835257b09914b180e7a9b

  • SHA256

    725bef1d64e9cc823c94255323b5c9461929aec4721ca87de5ec8626ff7e112d

  • SHA512

    9261f3ea8d48eacd0de2128a9ab3346e7442b956b67b30ab623fbd990aca0a28cfb5adb67c1547763fdecc26248dff289903665210c696f22e0bdf57e650a155

  • SSDEEP

    96:M8/vIkXIuabLwKgKGUzOVCWoUAxcbL2Rds65xBQrSAhSy:TgkPabMLUzG3bSRC6byrS8S

Malware Config

Extracted

Family

icedid

Botnet

3671205527

C2

blackferrow.com

orangegrande.com

Attributes
  • auth_var

    1

  • url_path

    /news/

Signatures

Files

  • 1664-54-0x0000000000110000-0x0000000000147000-memory.dmp
    .dll windows x64


    Headers

    Sections