Extracted

• • Target

    documents.lnk

  • Size

    1KB

  • MD5

    fb7d17b5ec787f604a1c1a444ac13c03

  • SHA1

    a72296fd3b7d5225a368ae3be57db9209315e1d7

  • SHA256

    4ed0e46236e39c6efe3f1f96d6a1e3a5cc60b7bcfabe560823b141dcef4c66de

  • SHA512

    1ffc5007e14aaacb9cafd31614a7f8fc9654f3c655cb5c167dd10c0a79e4703db902763ddaaabd8277e2c4849bbcabf30587123708e24343815874e61109ae1a

  Score

  10^/10

  icedid3068011852bankerloadersuricatatrojan

  • IcedID, BokBot

    IcedID is a banking trojan capable of stealing credentials.

    trojanbankericedid

  • suricata: ET MALWARE Win32/IcedID Request Cookie

    suricata: ET MALWARE Win32/IcedID Request Cookie

    suricata

  • Blocklisted process makes network request

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  behavioral1behavioral2

• • Target

    mi90o.dll

  • Size

    486KB

  • MD5

    0ad0a1a3bfc696759bac79077654aa8a

  • SHA1

    38bea715a0c8642e0d67213be6206bbe4b9afc44

  • SHA256

    a8058555e8b476a0975d103228ec26b53cd71dac34d21f58acfc395a38acdb1d

  • SHA512

    dd1588cbe8ac2915f0953976e8f5c837c1bb5fb7cf484fdeb46ba99ea070a0093a440cb876a88b909bd170502218d6fa52bf1c693611e9b973e53c870a3bc6d6

  Score

  3^/10
  behavioral3behavioral4