General

  • Target

    3284-13-0x0000000180000000-0x0000000180009000-memory.dmp

  • Size

    36KB

  • MD5

    b28ef294f63d41972d2628629b84e861

  • SHA1

    35f5ee651e576074c4996efcd6a52216be4df903

  • SHA256

    e18199e82430780b69bdc9516405d1088dbdf09ead3b57844d66a8197dace7e4

  • SHA512

    f55e38b37155f08d104f30e807a5364dbbd36b1e0a7943d4d5d2316a69b2c5a07bc26d639669cfef17e9bb6153658f3dad699f2cbeceb9af8d4be12c875f6430

  • SSDEEP

    384:s5Jxayczq7Yjt9lfle9s6PLZx36kYGi8:s5DHYeIlfle9HD7li

Score
10/10

Malware Config

Extracted

Family

icedid

Campaign

909843654

C2

restohalto.site

Signatures

  • Icedid family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3284-13-0x0000000180000000-0x0000000180009000-memory.dmp
    .dll windows:6 windows x64


    Headers

    Sections