General

  • Target

    202409199995f1777fcc33eb013df36789baf46cicedid

  • Size

    8KB

  • MD5

    9995f1777fcc33eb013df36789baf46c

  • SHA1

    c2b7b8ea258c3f57e29db4a89a354b6f047cfeef

  • SHA256

    c0f932a472fefd868d4d4bc324859a1d5a614258a957ec9e49d53089411af0f6

  • SHA512

    ac4a46d15c5c0e566712db32b7dbfe33c9844b57cdf3f7d4983950bb57013d34296b54fd1e4b5d0eedb138f0c333b35a8834244499e588bb76f5c2384918f8ca

  • SSDEEP

    96:/Oo6iJBvwj60QWwjijUhASao4CbvyCenVHiL4JMamhyhRl0V+N+OyIMD:/56iXvwj608jijUhR4CbvpSC0Ss9C5h

Malware Config

Extracted

Family

icedid

Botnet

2800866022

C2

citytrallbus.xyz

cluebullet.best

mannycoder.top

kolobanga.press

freekolobanga.top

conspiracylegal.xyz

Attributes
  • auth_var

    10

  • url_path

    /audio/

Signatures

  • IcedID Second Stage Loader 1 IoCs
  • Icedid family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 202409199995f1777fcc33eb013df36789baf46cicedid
    .exe windows:5 windows x86 arch:x86

    6ef9fc3b824d44b454eb43ca834c20b8


    Headers

    Imports

    Sections