General

  • Target

    3312-7-0x0000000180000000-0x0000000180009000-memory.dmp

  • Size

    36KB

  • MD5

    18e3bed35c28c54cf5b2e7085788ecf9

  • SHA1

    e94bd900ec6a78a75067b832c51b6cd29c3b4d55

  • SHA256

    d79217f4f14d155ba956a3d6c2334f3ca62b6268a483865611f5d833c34abd72

  • SHA512

    09a92602fcc234bb42b8c1c5bad5d999fff450ee702438dea74315dad7ce999120e7d801306a7942ce35736abd53f4587cf216801f4f66a189aec585bcb14b3c

  • SSDEEP

    192:6P+nM5KC/zxayGc3gzq7YjDaqzJCueT+RfbZne9s6PLi2P0tkYGijYVx0:s5Jxayczq7Yjt9lfle9s6PLT6kYGi80

Malware Config

Extracted

Family

icedid

Campaign

4240553492

C2

oopscokir.com

Signatures

  • Icedid family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3312-7-0x0000000180000000-0x0000000180009000-memory.dmp
    .dll windows x64


    Headers

    Sections