Extracted

• • Target

    sol3nia/documents.lnk

  • Size

    2KB

  • MD5

    a70b3ec4c53ae4755365ac54d9ee05ec

  • SHA1

    2d991fc5b373182b537300b93329eaee13d2294e

  • SHA256

    2fe44042cfc6602b43204e38bcbc2773d1e4f87be6aa16073625bc1b33af6877

  • SHA512

    57de536a0b7c3ab74aa7480195341a3214162790869cfaede1917558fffb48023206eb68fb0a29d46c2eb720357f70bfe43a4d6a379f19a16f1ab34e28178050

  Score

  10^/10

  icedid3585208491bankerloadersuricatatrojan

  • IcedID, BokBot

    IcedID is a banking trojan capable of stealing credentials.

    trojanbankericedid

  • suricata: ET MALWARE Win32/IcedID Request Cookie

    suricata: ET MALWARE Win32/IcedID Request Cookie

    suricata

  • Blocklisted process makes network request

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  behavioral1behavioral2

• • Target

    sol3nia/sol3nia.dll

  • Size

    355KB

  • MD5

    88789ba7f00909005b2fe18ce83dbf58

  • SHA1

    08ffb813d1d7544380aa1b0e41703207451e1def

  • SHA256

    00dcc4642d488643856259cd3c576d9e24045b48783fc21ebdccd5fb4de66f8c

  • SHA512

    c78f79bd27a535e2efc1a133bfe92048dc3a77e9b9e6ef0aebab6403835fb585771c4da14493a1bf81a72e0f8340a5db81964e8852b4a3e8d0f9232985cd3478

  Score

  3^/10
  behavioral3behavioral4