Extracted

• • Target

    documents.lnk

  • Size

    1KB

  • MD5

    dc097dea18775a8f3d31b52697dc368e

  • SHA1

    c9d5fe30ac230dc48d450182fb899c9638fb35bb

  • SHA256

    f7861ee8b3917e3746d44a769453334c9bf1b780213634ed9abd42f7873b0593

  • SHA512

    ad34d919b7e8dc014e53c14a3a6c74556a24b1258aec83eb3c5fe584c9c908ba3a11e001319ae22e51173c6908ba6c34e5dde7f4056d0cc753e645ea2310ddb0

  Score

  10^/10

  icedid3000901376bankerloadersuricatatrojan

  • IcedID, BokBot

    IcedID is a banking trojan capable of stealing credentials.

    trojanbankericedid

  • suricata: ET MALWARE Win32/IcedID Request Cookie

    suricata: ET MALWARE Win32/IcedID Request Cookie

    suricata

  • Blocklisted process makes network request

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  behavioral1behavioral2

• • Target

    olasius.dll

  • Size

    576KB

  • MD5

    2d01a326dcb38cd629b771e35ad3f5d5

  • SHA1

    111af3037c9837e8fb43610e070af474bd9bcbea

  • SHA256

    6c168f840b0af92cc2974a95151d3b21f02c37be9d16225bac03ece6c1404369

  • SHA512

    a3fd2c640a6a478796e06ca88a2b5752ed37ccbae9c419488ccbdef8c344c4379becd2e3d1beda1f3bab4d3b943917a9b23d9e3fea5bb6d3148b0904b8996a76

  Score

  3^/10
  behavioral3behavioral4