Extracted

Extracted

• • Target
    document-1371682618.xlsm
  • Size 106KB
  • SHA256 9be45d78a44672eecc44431401d73f41b1d7a3899ae96e3babe781ecb5fcea1d
  • MD5 6ff590fd95885794e093b95500507125
  • SHA1 8459409025f83234a3e0923cf75b8262bd1ec779
  • SHA512 f3578b238623e070f207eaf6c0a2d5804ab8eb202d5213d24d96780f45ecb36406c7ad50fc6f5a15e89cee1121663658994bce612bfd6a846cc03737071d5ed5
  • MD5 SHA1 SHA512

  Score

  10^/10

  icedid3633240867bankerloadertrojan

  • IcedID, BokBot

    IcedID is a banking trojan capable of stealing credentials.

    trojanbankericedid

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • IcedID First Stage Loader

    loader

  • Blocklisted process makes network request

  • Loads dropped DLL

  behavioral1behavioral2