General

  • Target

    1b604922254eb1b6c4d577873f0a5e42b0aa7e86041c2edad37828a1c22b3f2c

  • Size

    6KB

  • MD5

    d10df2beb4b0e49b9806af3ed49706be

  • SHA1

    e150689e82ad4e564008ae1d07bc532e8d197ddf

  • SHA256

    1b604922254eb1b6c4d577873f0a5e42b0aa7e86041c2edad37828a1c22b3f2c

  • SHA512

    6f8c9a647a59d7a946281ca89870ca5a6cc0b01aa7b86216ebee9ec5763814873a4eaa09cafd99755dad199b3b92bf631c1d5688b0896929e24c730b6e1d8339

  • SSDEEP

    96:CAVCUOemFbOCsnsLoBTp91AFtsRaAyDI6QpVhMdk:CApOjr4sLETnu3wy0ndMq

Malware Config

Extracted

Family

icedid

Botnet

452507187

C2

adrescairhot.com

bromidnaus.com

Attributes
  • auth_var

    28

  • url_path

    /news/

Signatures

Files

  • 1b604922254eb1b6c4d577873f0a5e42b0aa7e86041c2edad37828a1c22b3f2c
    .dll windows x64

    fe8ac26a9e653c5408fbc7a4bbbb5cbb


    Headers

    Imports

    Sections