Extracted

• • Target

    76447fec55fa1a5623e0274605e4134184425fdf99c01b7003ff0b3aa6eccdf2

  • Size

    2.1MB

  • MD5

    3325bd0f3dace44f9eac6d8a47b6b0e1

  • SHA1

    a3ab8a9783a6ad34d165f928c4603f59b529863c

  • SHA256

    76447fec55fa1a5623e0274605e4134184425fdf99c01b7003ff0b3aa6eccdf2

  • SHA512

    1fc1a826bda4f2fa50fcb4cb14584feec21b30d5942de53b9d04f8a668fb826cd752b3220386fda75c674393ee1f8b78d3611b9d4b6230e6f7419a838a60621d

  • SSDEEP

    49152:CGMZCMYhgl5R/4NurkXDYqM/JDK6M3fKgDaJx:vMZCMYh0DHkX8hDK9igDo

  Score

  10^/10

  icedid3281798692bankerloadertrojan

  • IcedID, BokBot

    IcedID is a banking trojan capable of stealing credentials.

    trojanbankericedid

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • Blocklisted process makes network request

  • Loads dropped DLL

  behavioral1behavioral2