Extracted

• • Target

    reconsolidating.dll.exe

  • Size

    99KB

  • MD5

    eb9cbe86035927b15b31095b56b830aa

  • SHA1

    cf5acb8cbc8831ccfc373d7104636ba286f0805c

  • SHA256

    6a1ba492984c630ad274b2943b37a697c35a9147f367ddd83b42a229d7e1c27a

  • SHA512

    d7a807ecbeb671901fc0b11eb5522177f4d7d86f14da6c6bfa4ddb3a6b39c2f2e6c58e2bba125a4009d9f1f446a23a947c5f05c301a19e3291f179ab8aac2b84

  • SSDEEP

    1536:UckoJv7wXfoYNzPaRgi3WndDyKHegxaOgcSvdYP4hoGrsDKt9t5N:CAv76fhNndDyKHucSvw46GrsDyD5N

  Score

  10^/10

  icedid2211825656bankerloadertrojan

  • IcedID, BokBot

    IcedID is a banking trojan capable of stealing credentials.

    trojanbankericedid

  • Blocklisted process makes network request

  behavioral1behavioral2