Extracted

• • Target

    document.lnk

  • Size

    2KB

  • MD5

    a7ec43a3bd10d95a788f79c20ab8796f

  • SHA1

    5c165fedae74c0ef60104772dc82f34520e1ff6f

  • SHA256

    a17e32b43f96c8db69c979865a8732f3784c7c42714197091866473bcfac8250

  • SHA512

    69eb3fd86ddf68e14f37dc7e862a9accf389b64c2a009c292da324bb63414453b51c6206845a1c364df0658288265a111900bbd09a50a920788dda67ccd6f2b2

  Score

  10^/10

  icedid2401334462bankersuricatatrojan

  • IcedID, BokBot

    IcedID is a banking trojan capable of stealing credentials.

    trojanbankericedid

  • suricata: ET MALWARE Win32/IcedID Request Cookie

    suricata: ET MALWARE Win32/IcedID Request Cookie

    suricata

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  behavioral1behavioral2

• • Target

    main.dll

  • Size

    1.2MB

  • MD5

    e837721973bddc2555f675f89c6121fa

  • SHA1

    5f03d305a3326fd0a7417b3a1d91e310db892f4b

  • SHA256

    2c1e2e0a9ea8e180d9323229d780590df4bd1a90781e6eebc85d9c9b0b5f41c4

  • SHA512

    fdb649c3b3f0cf36f77776fd059e6a5f19be79b2bddd66615d69b0f2633f2ee65a8ddaca3a474c899640fca1243b8f6791b89bc495c27c54929e745f134b0a50

  Score

  10^/10

  icedid2401334462bankersuricatatrojan

  • IcedID, BokBot

    IcedID is a banking trojan capable of stealing credentials.

    trojanbankericedid

  • suricata: ET MALWARE Win32/IcedID Request Cookie

    suricata: ET MALWARE Win32/IcedID Request Cookie

    suricata
  behavioral3behavioral4