General

  • Target

    3268-135-0x0000000180000000-0x0000000180009000-memory.dmp

  • Size

    36KB

  • MD5

    73477b2b990ee114745e4bc5722dfc99

  • SHA1

    704674c42f6b7c82ff605b85724250a1ddce4b87

  • SHA256

    db06b6674633fc0ed4741b5d1560dcee0cdf28e6b91483b2341140034f2a19e9

  • SHA512

    922c93f84aac3d1e2ac6c0ed5d912d1a873ccdf9a9641e0539cfbcb4f053c82e04c186b749d7dda32905440f7bcabe745ac332de03634cbba4e4126acfd45b00

  • SSDEEP

    192:6P+nM5KC/zxayGc3gzq7YjDaqzJCueT+RfbZne9s6PLN1uP0tkYGijYN:s5Jxayczq7Yjt9lfle9s6PL+6kYGi8N

Malware Config

Extracted

Family

icedid

Campaign

2571229592

C2

mokililsan.com

Signatures

  • Icedid family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3268-135-0x0000000180000000-0x0000000180009000-memory.dmp
    .dll windows x64


    Headers

    Sections