Extracted

• • Target
    document-130722.21047.png.lnk
  • Size 1KB
  • SHA256 561ec5979da018f190aa278e52248942830657c0434093bf7661bae86133b084
  • MD5 ecae6e456e043953f4c6da3c21a58b57
  • SHA1 c90de4955228ae22f14ea06ce491aa9e46da4bf5
  • SHA512 074a43a555762c2b2e4116a1374c4f2c2be93821d07d365cb8a3a6938863ecac4a5dc2001550169a0c23f695ccdf007a4f569dcdd1ea438e3a6616f5d7b87bda
  • MD5 SHA1 SHA512

  Score

  10^/10

  icedid294489237bankerloadersuricatatrojan

  • IcedID, BokBot

    IcedID is a banking trojan capable of stealing credentials.

    trojanbankericedid

  • suricata: ET MALWARE Win32/IcedID Request Cookie

    suricata: ET MALWARE Win32/IcedID Request Cookie

    suricata

  • Blocklisted process makes network request

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  behavioral1behavioral2
• • Target
    mVi4x9m3.dll
  • Size 56KB
  • SHA256 cda6e3247a765c9e4613cfd71e0ee0300abe5a3d68cd4fe0c9a76acb7a945be2
  • MD5 7007b534a839143a3f2456d09fe4fc3f
  • SHA1 5e492b0a94823e488271a94f03cf7b4c4a880967
  • SHA512 9a0128cfaed5b7fec1c90348ab146fbe317f878f0c361778e47e31c24cdf7cfda8d765d8e5667e73ee20a411c1c8f25cc5cb9b2c272f415006d1d088f1a5e352
  • MD5 SHA1 SHA512

  Score

  10^/10

  icedid294489237bankerloadersuricatatrojan

  • IcedID, BokBot

    IcedID is a banking trojan capable of stealing credentials.

    trojanbankericedid

  • suricata: ET MALWARE Win32/IcedID Request Cookie

    suricata: ET MALWARE Win32/IcedID Request Cookie

    suricata

  • Blocklisted process makes network request

  behavioral3behavioral4