General

  • Target

    icedid_dump

  • Size

    6KB

  • MD5

    629933e17fa1e58e30041e0a0e1b5ec7

  • SHA1

    e4d0ca64031cd293119a72e3cbba3bd84e93899e

  • SHA256

    1b22f59b757dff8865e0406863048694ee023dc1739df3af949043d1e6657e8c

  • SHA512

    735e95322ca35a34c4f9a17bd5d780969881f1924ea72c8e7831edb31c8ac0100e67b02c4ace9918c973e4f7e1f6f464b06d9d9e04cd8abf31529a5612a28554

  • SSDEEP

    96:CAVCUOemFbOCsnsLoBTp91AFtsRaAyDI6QpxJ/eDbP:CApOjr4sLETnu3wy0ndeDb

Malware Config

Extracted

Family

icedid

Botnet

1573268852

C2

peranistaer.top

gruvihabralo.nl

Attributes
  • auth_var

    10

  • url_path

    /news/

Signatures

Files

  • icedid_dump
    .dll windows x64

    fe8ac26a9e653c5408fbc7a4bbbb5cbb


    Headers

    Imports

    Sections