General

  • Target

    3260-19-0x0000000180000000-0x0000000180009000-memory.dmp

  • Size

    36KB

  • MD5

    bce400cf504663982d07b2b91988701b

  • SHA1

    925e0d8af490219c417de12604824084d510f7dc

  • SHA256

    b8be5371a3df825738d177e4577aa27973467efedfa8066745eefab7241430b3

  • SHA512

    e700a46e33870a88b9142a0dc99c72ceb3d5d2c973bf36bb15b5184960d7b967c2628b848d5a846eade988c7b968abcaeb597c71118c985f3d371c274b663380

  • SSDEEP

    384:s5Jxayczq7Yjt9lfle9s6PL78fKH6kYGi8:s5DHYeIlfle9HDz1i

Malware Config

Extracted

Family

icedid

Campaign

2277756885

C2

mestorycallin.com

Signatures

  • Icedid family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3260-19-0x0000000180000000-0x0000000180009000-memory.dmp
    .dll windows:6 windows x64


    Headers

    Sections