General

  • Target
    640-54-0x0000000180000000-0x0000000180009000-memory.dmp
  • Size 36KB
  • Sample220723-kbt17addem
  • SHA256 7eab4985bd71666436740b0b73f1f61dd790cf99e1385ecc0caeb4e6cf41e479
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Extracted

Family
  • icedid

Campaign
  • 1195019694

C2
  • garbagewellduno.com

Signatures

File Explorer

  • 640-54-0x0000000180000000-0x0000000180009000-memory.dmp
    .dll 36KB

640-54-0x0000000180000000-0x0000000180009000-memory.dmp

  • SHA256 7eab4985bd71666436740b0b73f1f61dd790cf99e1385ecc0caeb4e6cf41e479
  • MD5 SHA1 SHA512 SSDEEP
Minor OS version
Major OS version
Entry point
9292
Magic Number
523
Subsystem
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths