Extracted

Extracted

• • Target

    core.bat

  • Size

    184B

  • MD5

    2e953752ab70f418ab9e4696d9b4bdfc

  • SHA1

    a079b4c52925246ceea4566c3939f4e383c809cb

  • SHA256

    9af7012c43781e99e421ca53d2b00f52b30f5eb35f436baa21bcbc919cd8ccf1

  • SHA512

    8faf179ae5505a48650786fac05f7a6f291a787904367aec505f9b5b0ac7de1b123b8a19c243e74fa49edf34d8f6de84d741cf11108d05eb017c6c3afc8a3d9a

  Score

  10^/10

  icedid4221486031bankertrojan

  • IcedID, BokBot

    IcedID is a banking trojan capable of stealing credentials.

    trojanbankericedid

  • Blocklisted process makes network request

  behavioral1behavioral2

• • Target

    entry-64.tmp

  • Size

    160KB

  • MD5

    d6444f52777f52f5a18dfa8d30fe8ce2

  • SHA1

    68be9b3164b7b7f133bb0242b77e88b04bc03b08

  • SHA256

    6c358edb2a4ffa59ffcd066960f937db7f95cf646ea2792bc5efbe8b3072dae7

  • SHA512

    f5d6ee66748d9d51cab0b3e85a451dcaccdbee04eb31e5dcd6f019a3f08b4818134d5c0d41dd2991c152a6292d34e81495d19dbd5eb51da16ecb60def5625179

  Score

  10^/10

  icedid4221486031bankertrojan

  • IcedID, BokBot

    IcedID is a banking trojan capable of stealing credentials.

    trojanbankericedid

  • Suspicious use of NtCreateProcessExOtherParentProcess

  behavioral3behavioral4