General

  • Target

    726633284931ff2411cc3b2bae2e80de4548b8e5f0b9023ae147a279ca5a3233

  • Size

    6KB

  • MD5

    b083c6bb35f00f27e72c9ad927347aed

  • SHA1

    1df001abc683eef19ad83dc550b29e993aa6b329

  • SHA256

    726633284931ff2411cc3b2bae2e80de4548b8e5f0b9023ae147a279ca5a3233

  • SHA512

    7c02a2a076dae668aa9a43627085af9b942f130868ae977eea18912e1ca372fcf7f51d59fe3986f3e75eba3c8dfd45aafd7119ff1584bf13918400766e3d06ad

  • SSDEEP

    192:nL48DesHz289OkeALo7VXcbUFmUnODIqgKTxnM:nLVDeua89wAU7dVG7xnM

Malware Config

Extracted

Family

icedid

Campaign

4165079571

C2

podiumstrtss.com

Signatures

  • Icedid family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 726633284931ff2411cc3b2bae2e80de4548b8e5f0b9023ae147a279ca5a3233
    .zip

    Password: infected

  • a3fa68045d0106d6db3d43df6b5997d9034f9f7d2a34148187498e4b504ebf58.exe
    .dll windows:6 windows x64 arch:x64

    c8c62b0edf4a5f76dfd31e8262b5adbe


    Headers

    Imports

    Exports

    Sections