Extracted

• • Target
    app.dll
  • Size 242KB
  • SHA256 effc431f13997a896d07082c4c018a77feee075097fd80de167c20c7515d1516
  • MD5 c61962914cb07148c99a8aade3a72463
  • SHA1 b1cca13810f5595d520980da05dc58ea520db7ee
  • SHA512 8f3f134890029f990609b6fe5d3208e9109f4b401ae8b5b3326f45aa9f430eba0d60885c53a9303eb4fa00e93a7bab4a3e3c198a845ae534cb3502ed2d1f1465
  • MD5 SHA1 SHA512

  Score

  10^/10

  icedid4157420015bankerloadertrojan

  • IcedID, BokBot

    IcedID is a banking trojan capable of stealing credentials.

    trojanbankericedid

  • Blocklisted process makes network request

  behavioral1behavioral2
• • Target
    pss10r.chm
  • Size 391KB
  • SHA256 d3b3627a34b3738327449653acfc5509be290722648fd1f55ee09bd0a6ff941f
  • MD5 dfd56b769ad71671a22b2fb83d4863e4
  • SHA1 85fe9e548b8cf44ba0bf0b7cab3d3fcc264d7e3d
  • SHA512 c7be11f040d52fc34caa68d7c423d16ceccedb16c3e5c6e8481f483563b61f60ab6adba41ac99381bdce34c91e81ee99c75524a8fe3edfdb7137f05a40eeef3f
  • MD5 SHA1 SHA512

  Score

  7^/10

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  behavioral3behavioral4