Extracted

Extracted

• • Target
    document-1493212695.xlsm
  • Size 106KB
  • SHA256 f9a9dc2d140e8a8b94c3d69571305b5954904842e212b24ef23d18b7178abc39
  • MD5 230179da1973ec869aa36da5f7d2912d
  • SHA1 08b3096afe66f2217539181d9770ffd5c0011f99
  • SHA512 b9a4a439706e2b879792c25dc69ff3944521d29bdf098b07de0b3a3807e6305f0a2a8c98c54443daf642f3bc5aba639e3df6c1883141b545984a6b490c5dea15
  • MD5 SHA1 SHA512

  Score

  10^/10

  icedid3633240867bankerloadertrojan

  • IcedID, BokBot

    IcedID is a banking trojan capable of stealing credentials.

    trojanbankericedid

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • IcedID First Stage Loader

    loader

  • Blocklisted process makes network request

  • Loads dropped DLL

  behavioral1behavioral2