Extracted

• • Target

    sol3/documents.lnk

  • Size

    2KB

  • MD5

    a70b3ec4c53ae4755365ac54d9ee05ec

  • SHA1

    2d991fc5b373182b537300b93329eaee13d2294e

  • SHA256

    2fe44042cfc6602b43204e38bcbc2773d1e4f87be6aa16073625bc1b33af6877

  • SHA512

    57de536a0b7c3ab74aa7480195341a3214162790869cfaede1917558fffb48023206eb68fb0a29d46c2eb720357f70bfe43a4d6a379f19a16f1ab34e28178050

  Score

  10^/10

  icedid3585208491bankerloadersuricatatrojan

  • IcedID, BokBot

    IcedID is a banking trojan capable of stealing credentials.

    trojanbankericedid

  • suricata: ET MALWARE Win32/IcedID Request Cookie

    suricata: ET MALWARE Win32/IcedID Request Cookie

    suricata

  • Blocklisted process makes network request

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  behavioral1behavioral2

• • Target

    sol3/sol3nia.dll

  • Size

    355KB

  • MD5

    1789e8bad7a537dfdb0259ee510a2cea

  • SHA1

    b4cfc4faed732eff5340d172063ae9991c38b054

  • SHA256

    b26ef5630a4b19bbe5e520c5d41000c2b29855a7c8d5c15af9ddf99661e0231c

  • SHA512

    a47d46bbb4df66a0615cdbe660815ca34976d0eea1b024c7a6ca040827bdbc33c7cae5f5a78805c09e3a69a95026c03b2aa11f859e1feecd39a5b5c36e578e3b

  Score

  3^/10
  behavioral3behavioral4