Extracted

Extracted

• • Target

    core/cmd.bat

  • Size

    188B

  • MD5

    79b6a4cecfb4fde6a71711fa4f73f380

  • SHA1

    6f53e66f1c6dbe62849b9c36a48cd7c642de7d97

  • SHA256

    8bbbeff5c9130e3d9a960cfb248f25afd2edb8e44c8f6f48b710156fbffa1370

  • SHA512

    0bc26075a5c4858709fa957abe12e6bb62e263f9a90ec1eb6c90b53f3b3a5a6a27cde679819944b0aef9939f1106373add4041a8141ae5ae9d22ef0d91ea4db1

  Score

  10^/10

  icedid987543880bankerspywarestealertrojan

  • IcedID, BokBot

    IcedID is a banking trojan capable of stealing credentials.

    trojanbankericedid

  • Blocklisted process makes network request

  • Downloads MZ/PE file

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer
  behavioral1behavioral2