Extracted

Extracted

• • Target

    b4a0138a637e4f800e62d91923dc7f77809ab6bf8f27d621502cbe82b06db485

  • Size

    13KB

  • MD5

    e67a59efdb77392a37fdfc2c37db1391

  • SHA1

    5599ea9e45eaeae3985bda51e35befc6c78cc098

  • SHA256

    b4a0138a637e4f800e62d91923dc7f77809ab6bf8f27d621502cbe82b06db485

  • SHA512

    e96cef3386767f2a00dd066f7646487a69be87388c7a1e468bb05b45ecd9172031ff87f9286545ae2bab70818e33ead255ebf63f37af97d9370320791519f961

  Score

  10^/10

  icedid168463318bankercore_payloadsuricatatrojancollection

  • IcedID, BokBot

    IcedID is a banking trojan capable of stealing credentials.

    trojanbankericedid

  • suricata: ET MALWARE Win32/IcedID Request Cookie

    suricata: ET MALWARE Win32/IcedID Request Cookie

    suricata

  • Downloads MZ/PE file

  • Loads dropped DLL

  • Accesses Microsoft Outlook profiles

    collection
  behavioral1behavioral2