Extracted

Extracted

• • Target
    document-1241308638.xlsm
  • Size 106KB
  • SHA256 5d8cd0de2bba3dc6b46cb875e0f52d3a914ca90fd56baa79517b64eff7a704be
  • MD5 f2d5a308639e0f6da97d8fc3daed0dfb
  • SHA1 6c56da6750b36153246ef8e8969f1b604b711277
  • SHA512 1d591c08969aa76d405fec97b09fe78cb571108587ee64887a6a60be6bcacf5d6fc8a4fa4646bc47a60ffedcb4505b230e0aa761c2ae1fc40500495dabda1bb9
  • MD5 SHA1 SHA512

  Score

  10^/10

  icedid3633240867bankerloadertrojan

  • IcedID, BokBot

    IcedID is a banking trojan capable of stealing credentials.

    trojanbankericedid

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • IcedID First Stage Loader

    loader

  • Blocklisted process makes network request

  • Loads dropped DLL

  behavioral1behavioral2