Extracted

Extracted

• • Target

    core.bat

  • Size

    180B

  • MD5

    5abd34de9a35879df648b0fceb40e95d

  • SHA1

    b57efae330d206a933d0e92699536056ee84d7df

  • SHA256

    e3b8505a1fc778f8cb1679695e0aba51ea3feafb04901822df1bab5685178876

  • SHA512

    72db89236aae1fd29c17b6a8916eb9c4855f5ed33daa01268a4613e73b0361f51975531f46c55e93ebd0ac65d0bcd3ba1b336b920ce7573824b116533cd0e00a

  Score

  10^/10

  icedid3036889562bankercollectionspywarestealertrojan

  • IcedID, BokBot

    IcedID is a banking trojan capable of stealing credentials.

    trojanbankericedid

  • Blocklisted process makes network request

  • Downloads MZ/PE file

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection
  behavioral1behavioral2

• • Target

    oak_32.tmp

  • Size

    533KB

  • MD5

    3a154ce57e032a255a9936b92aaf996f

  • SHA1

    512e5af1b4b98c7d5a7c8d25341f31749f331273

  • SHA256

    c558309a80b460844bc23a72c49d524d299c11fc058b2b5ea150790022144ac6

  • SHA512

    e0226761df28bba51b86a9d8aac3359eba922c86b42ed3db5541fffa05e607932b39579b7fd11202ffa1ef750f9695bb696f76e9275c4a483fb049c33aa6ca5f

  Score

  10^/10

  icedid3036889562bankertrojan

  • IcedID, BokBot

    IcedID is a banking trojan capable of stealing credentials.

    trojanbankericedid
  behavioral3behavioral4