Extracted

• • Target

    dar.dll

  • Size

    147KB

  • MD5

    4a6ceabb2ce1b486398c254a5503b792

  • SHA1

    08a1c43bd1c63bbea864133d2923755aa2f74440

  • SHA256

    4a76a28498b7f391cdc2be73124b4225497232540247ca3662abd9ab2210be36

  • SHA512

    a7266dbfee0689fe9386686a6f892055fffb15f5c11e77bf6591ded82a00b884da9b13ce5a7f29c827ae91018d9f7e71e2e6abb99050da3419154ae1edf77394

  Score

  10^/10

  icedid3529509686bankerloadersuricatatrojan

  • IcedID, BokBot

    IcedID is a banking trojan capable of stealing credentials.

    trojanbankericedid

  • suricata: ET MALWARE Win32/IcedID Request Cookie

    suricata: ET MALWARE Win32/IcedID Request Cookie

    suricata
  behavioral1behavioral2

• • Target

    document.lnk

  • Size

    1KB

  • MD5

    adf0907a6114c2b55349c08251efdf50

  • SHA1

    aa25ae2f9dbe514169f4526ef4a61c1feeb1386a

  • SHA256

    3bb2f8c2d2d1c8da2a2051bd9621099689c5cd0a6b12aa8cb5739759e843e5e6

  • SHA512

    12d8f47079c712c0fd231ddb5dd7669e1345a3c1f531732b5ecb35895c98acbfb7a5fa49ca63e71084378355646baaa7bf8b3e10edaddf71d58a7ccde9c7f896

  Score

  10^/10

  icedid3529509686bankerloadersuricatatrojan

  • IcedID, BokBot

    IcedID is a banking trojan capable of stealing credentials.

    trojanbankericedid

  • suricata: ET MALWARE Win32/IcedID Request Cookie

    suricata: ET MALWARE Win32/IcedID Request Cookie

    suricata

  • Blocklisted process makes network request

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  behavioral3behavioral4