General

  • Target

    3396-143-0x0000000180000000-0x0000000180009000-memory.dmp

  • Size

    36KB

  • MD5

    145269ee4ce5b7383f67ba75fe1f96cf

  • SHA1

    17082207d8b67c11e7c72f110d9a80498d41218c

  • SHA256

    d19d0fea13ce7ff9ac79ac67b6265b2b6140a078d74586caf16e632c126bd251

  • SHA512

    f67a326647e726c148f92339aef2d29d403deca636845f5b619ebfe713eea3333d2e20fe6ae1d9400878f6bcbd54db8ebd14cfac227cf04bed28122d94290fbf

  • SSDEEP

    192:6P+nM5KC/zxayGc3gzq7YjDaqzJCueT+RfbZne9s6PLyunP0tkYGijYN:s5Jxayczq7Yjt9lfle9s6PL16kYGi8N

Malware Config

Extracted

Family

icedid

Campaign

2571229592

C2

mokililsan.com

Signatures

  • Icedid family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3396-143-0x0000000180000000-0x0000000180009000-memory.dmp
    .dll windows x64


    Headers

    Sections