Overview

overview

10

Static

static

10

3612-137-0...ry.dll

windows7-x64

1

3612-137-0...ry.dll

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3612-137-0x000001E993670000-0x000001E993679000-memory.dmp

  • Size

    36KB

  • MD5

    caae77466dbab96ea25d6ca51fa78cd9

  • SHA1

    6d787a580db67bf6aab9d0771ce7e99bc6e292ca

  • SHA256

    0e8fb7c07f311bacaf5d875db9cad74b315f0cafbf9e88c4fb5b97a6f131cfe4

  • SHA512

    85fb311e1eadc5155596cfa9342f3445c509d63bfe3e4fccc8eca41b030ea081fa1f9255d3aef27901448047dc4b7df3586b02271b739846aadcae816b490ebc

  • SSDEEP

    192:6P+nM5KC/zxayGc3gzq7YjDaqzJCueT+RfbZne9s6PLuZbP0tkYGijY:s5Jxayczq7Yjt9lfle9s6PLy6kYGi8

Score
10/10
loader4230667808icedid

Malware Config

Extracted

Family

icedid

Campaign

4230667808

C2

wendoqolta.com

Signatures

  • Icedid family
    icedid
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3612-137-0x000001E993670000-0x000001E993679000-memory.dmp
    .dll windows:6 windows x64 arch:x64


    Headers

    Sections