General

  • Target

    icedid_first.dll

  • Size

    16KB

  • MD5

    c1dd6f3d2c3ee21ebb4d3e93b74cab74

  • SHA1

    2fc6f0c1003d03f3fe8cab1a4c617e9bbb0eb18c

  • SHA256

    9ff5c9ce0d1536ce8b043b10758453e3349a82cc31195ca57250a272e65b4da4

  • SHA512

    799b3a71badf2eea132ab362c97df93273c65fc536b498702387c158826358939b88b340f4fda536272ce547d7cfba8a9bc8d964b99b86594c63d539377ee9c9

  • SSDEEP

    192:4prWb8lpaJmJVM1z506jA3VHp7YBFT/gssU3mg28IFUlH:Qrhl0JYK1z506jWlYVND3MFqH

Score
10/10

Malware Config

Extracted

Family

icedid

Campaign

380132461

C2

revedanstvy.bid

Signatures

  • Icedid family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • icedid_first.dll
    .dll regsvr32 windows x64

    Password: infected

    0f24f65b67a09b3f0ada8560d4be1247


    Headers

    Imports

    Exports

    Sections