Extracted

Extracted

• • Target

    myfairpointfile09.26.22.doc

  • Size

    866KB

  • MD5

    d05a32a24e9aed7c05e4e8dc5f373c99

  • SHA1

    4a76d21449c32c2c063a1445edd0d8e3792abcf7

  • SHA256

    28c39e238da2f920b7407370ada35aceedb457205a4dd3531e238b1f3c264b0d

  • SHA512

    c385c0b800120f9189e989f4c88fdaac969ff2149e212d5384ed1433994288cdf49a3efc2ba8a98831a10c6fef4a05852cefac595b99b45051dae1f0c637fcb1

  • SSDEEP

    12288:tVE9j2y+1JbeQbntrws6/GYzw6OFokpXfiiGef/DEOHNxwJWW/PXSYqGEPRV:tV2jUeQRI5wPN/JH8BPXSYqzRV

  Score

  10^/10

  icedid742081363bankertrojanloader

  • IcedID, BokBot

    IcedID is a banking trojan capable of stealing credentials.

    trojanbankericedid

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • Blocklisted process makes network request

  • Loads dropped DLL

  behavioral1behavioral2