Extracted

Extracted

• • Target

    core.bat

  • Size

    184B

  • MD5

    44c632173b60e370595d1079183a06c0

  • SHA1

    64cb76c484c6afa3585aea4a1ba68239d3d13584

  • SHA256

    1590cfe165f4f1791fa0b2cfb969d9841effa3183c7c7c4207b0bb201674183c

  • SHA512

    d4d1bf870a52658e91e1af57149e4ca53b9fda4b49145b8b67721fa9774d5c05a92b4b420e349177a96fad6b18b612620aaec401f9e383fb545467e5b4bd9330

  Score

  10^/10

  icedid3415411565bankertrojancollectionspywarestealer

  • IcedID, BokBot

    IcedID is a banking trojan capable of stealing credentials.

    trojanbankericedid

  • Blocklisted process makes network request

  • Downloads MZ/PE file

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection
  behavioral1behavioral2

• • Target

    unit-x64.dat

  • Size

    165KB

  • MD5

    0d82711ad2aa1c1f368044d5354ebe0c

  • SHA1

    b583791d4a9b0555bcacfc96cb0a1fdc68a8a120

  • SHA256

    4ea68de6023502f381034d45795cdfb8eb9d0cd19b8d4b94922075e004d78da7

  • SHA512

    7ae015a8ea5c3116a607bb6aa7a525b6d08c916102f3da555efbccacdcfa67d88444447a8b4fb4f2648e7de4c9e11334e99326b581f1820cabf034d3f0373703

  Score

  10^/10

  icedid3415411565bankertrojan

  • IcedID, BokBot

    IcedID is a banking trojan capable of stealing credentials.

    trojanbankericedid
  behavioral3behavioral4