General

  • Target

    920-54-0x0000000180000000-0x0000000180005000-memory.dmp

  • Size

    20KB

  • MD5

    c26844cb7559295efdb244c1952510ff

  • SHA1

    085721a84c537c6693ff195d6420291dd24978a3

  • SHA256

    349d2b86cfae11e5d63d6a05d8c9d62713068df5f5f5ddff754bb32079425c90

  • SHA512

    6ebbfbd76985a5bfa2f9cdbb8f262ad523862b026e6fc8394ae50506fbb5d5d357344831f1e6870aeb70ed318e4efd2180a7ce6fac2585d0b0fd062280a17c42

  • SSDEEP

    96:CAVCUOemFbOCsnsLoBTp9PtsRaAyDI6QpWNh1omr:CApOjr4sLETn1wy0nIq

Malware Config

Extracted

Family

icedid

Botnet

2406015698

C2

commamimubebe.site

asredetyr.site

aszepolityu.fun

likoportio.fun

Attributes
  • auth_var

    6

  • url_path

    /news/

Signatures

Files

  • 920-54-0x0000000180000000-0x0000000180005000-memory.dmp
    .dll windows x64


    Headers

    Sections