Extracted

• • Target

    core.bat

  • Size

    180B

  • MD5

    92ab94157586e3937dcfd7aaa380a7fb

  • SHA1

    74a326efc3c891877a8d2657d8a2fe3e37f059f7

  • SHA256

    dc74ad702adf3a1d49a4070915ffbd1b445c8f0ecfa42357a74380e34793f61d

  • SHA512

    44a54970a090f43c9dfa1865a0df0d5513cf3836d656f57a4c54d53847d8ada7e71265b53422ab7acbe1781a45742d8bbaa256cc275b514cbd773850cfadb77f

  Score

  10^/10

  icedidbankercollectionspywarestealertrojan

  • IcedID, BokBot

    IcedID is a banking trojan capable of stealing credentials.

    trojanbankericedid

  • Blocklisted process makes network request

  • Downloads MZ/PE file

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection
  behavioral1behavioral2

• • Target

    surge-.dat

  • Size

    56KB

  • MD5

    33dfe81be311fa8ef57484233cc41048

  • SHA1

    2add3138807dce2a3d2cb840b100746e76188455

  • SHA256

    537e72101559c3aac83c6618840241fbfbc93ee3fca306c52b4436a0558fc5e4

  • SHA512

    b3029ff6e0480dea8efc043b1ce54c7d1461755d198a9fc83163b860515ff9f4f0d243c64dfec68d4ea5487395bfb79fe0ca80b68bcc099e40f64847eee8fe09

  Score

  1^/10
  behavioral3behavioral4