General

  • Target

    85c593fe375ea0a94292482f945a1e9e7fcb3fb75f5663acb6fe0ad3524bb80e.dll

  • Size

    6KB

  • MD5

    8d37fffac977f24cd238dfa2ab28df01

  • SHA1

    08adae9a731ce6c6a2b5aa2730cc09192f0a2983

  • SHA256

    85c593fe375ea0a94292482f945a1e9e7fcb3fb75f5663acb6fe0ad3524bb80e

  • SHA512

    7283e3188e78229d3f3599a9a720869f15e3234ce1496577a293f5125812c5a88af648f9edab03ba14d8a76e53fb317306f74fac6dbc5937e167a7aed8194ac8

  • SSDEEP

    96:C+npSvbQMtOvL7fzO0YQrrBsp0Q8DI6Qp0eJbb:C+npObQQOv3zvh280nxhb

Malware Config

Extracted

Family

icedid

Botnet

96734359

C2

xairdone.com

bgreenglobus.com

rtofmethough.top

Attributes
  • auth_var

    4

  • url_path

    /news/

Signatures

  • Icedid family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 85c593fe375ea0a94292482f945a1e9e7fcb3fb75f5663acb6fe0ad3524bb80e.dll
    .dll windows x64

    613d56f9ae8f9890c49dcf4e9c890e6c


    Headers

    Imports

    Exports

    Sections