General

  • Target

    3348-19-0x0000000180000000-0x0000000180009000-memory.dmp

  • Size

    36KB

  • MD5

    6aeeed0bd4333fe7201e65832905e2c4

  • SHA1

    5065672c47f5ccb0c600977aa7396d5f567c870e

  • SHA256

    e5fa37ac952028554746f8f93928fa1fe99e079ed63995fff37456be3d8bbca2

  • SHA512

    edaef4e556c35671eff8c71773aed17cc23de9c66235b7ae5bc28fd807415615174c82e11a53ee981ea5bad6ca64b1592afce365a660beb466c5b36309dbb892

  • SSDEEP

    192:6P+nM5KC/zxayGc3gzq7YjDaqzJCueT+RfbZne9s6PLIP0tkYGijY:s5Jxayczq7Yjt9lfle9s6PL06kYGi8

Malware Config

Extracted

Family

icedid

Campaign

2277756885

C2

mestorycallin.com

Signatures

  • Icedid family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3348-19-0x0000000180000000-0x0000000180009000-memory.dmp
    .dll windows:6 windows x64


    Headers

    Sections