General

  • Target

    1044-55-0x0000000180000000-0x0000000180005000-memory.dmp

  • Size

    20KB

  • MD5

    1c7c3aa48355aa172a7cabe28cb9e565

  • SHA1

    80b8cdab10eb243729e753af9b888cb4519631da

  • SHA256

    9e4ee256016ed96cb4c6a83755cca53b49c7c23f7276d325010a92852a3c1b3c

  • SHA512

    c73c6487ef2a8c39f5001b9fa61b084f23c8095ef6307654ec993b3f6bfac412bb9947f38dc431fe2db18f7a8187006fe23ec1f4060b949de45c898d973fbb12

  • SSDEEP

    96:CAVCUOemFbOCsnsLoBTp9RKMk6tsRaAyDI6Qp6HJIx3LZK:CApOjr4sLETnRLkSwy0nYHJ2L

Malware Config

Extracted

Family

icedid

Botnet

1573268852

C2

peranistaer.top

gruvihabralo.nl

ultomductingbig.pro

alcoheyteri.click

Attributes
  • auth_var

    24

  • url_path

    /news/

Signatures

Files

  • 1044-55-0x0000000180000000-0x0000000180005000-memory.dmp
    .dll windows x64


    Headers

    Sections