Extracted

• • Target

    core.bat

  • Size

    184B

  • MD5

    03c55a40355cc8cb2c4af585e4a11973

  • SHA1

    207f004ca7a37ef43dded36dfd4cfa7e301f16f1

  • SHA256

    e59c7732e2cbb40e8bc74f3fd5a59a578d56322410f42234189939ff33b4f015

  • SHA512

    a842f632ef1aa91dafa75634a692f55e74097378fd48b7265c39366de656f45441d54822eddd0c66523f3e78c13840adfbc500b9622d7bc74415fac6b1181aa3

  Score

  10^/10

  icedidbankercollectionspywarestealertrojan

  • IcedID, BokBot

    IcedID is a banking trojan capable of stealing credentials.

    trojanbankericedid

  • Blocklisted process makes network request

  • Downloads MZ/PE file

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection
  behavioral1behavioral2