Overview

overview

10

Static

static

10

aaa516ff06...ex.exe

windows7-x64

1

aaa516ff06...ex.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    aaa516ff062b58exeexeexeex.exe

  • Size

    8KB

  • MD5

    aaa516ff062b582b61cec398185d1dcf

  • SHA1

    c6521033a058aa34c8e330317af377639d7943a3

  • SHA256

    2495778f3a15543896ff57a44e8eff9f232cfc0fc4c09aeb211d964329f2144d

  • SHA512

    6fed232577b39edd0dd47bfb9e3f3872a48e3478f55ce086310e1af5d096911898135593c0befe69a137164aff8a3c763657900992b9d5cadfcbef95111a599c

  • SSDEEP

    192:/+6mG4Dwj688b6bUh9H4CbXpGaKRoCa8prn:/+s4bhh9HxpLeoCa8B

Score
10/10
loader4031737906icedid

Malware Config

Extracted

Family

icedid

Botnet

4031737906

C2

fishofgloster.pw

newwildtuna.top
Attributes
  • auth_var

    4

  • url_path

    /audio/

Signatures

  • IcedID Second Stage Loader 1 IoCs
    loader
  • Icedid family
    icedid
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • aaa516ff062b58exeexeexeex.exe
    .exe windows x86

    ad8500a97208d71b9e86b82a28bbfc97


    Headers

    Imports

    Sections