Extracted

• • Target

    78bcac34-fc98-4310-a264-74194a64df6a.FZb

  • Size

    672KB

  • MD5

    6b584f0a0462354773a103ce8847829a

  • SHA1

    ee984b967a5effea3397a73093a00d34463fdbbb

  • SHA256

    2daa3a4465204f443309cdc96e287b11e649a16e61216409ff1e880db33b3d10

  • SHA512

    9bb48169ac02cba142c3389fa5ce4acb69c168e91df9e42641adb62b361638d9c997a5cfb67851d8b1686768b260ceb94dda85f825c6cfec9455a2619f4d25f7

  • SSDEEP

    12288:0H4Uq29eewyE0QKwv20JXLYw4wtzofurgQwC2wwwZwU+LnwgP6xdygmwq3P:082uxbEX3P

  Score

  1^/10
  behavioral1behavioral2

• • Target

    a51ae885-405c-4324-8173-7c83f1957f01.png

  • Size

    960KB

  • MD5

    bb575c4b910556f9f75147b07a561cee

  • SHA1

    26fe4a7c972c27112183f557e504f5b9ddc18598

  • SHA256

    b0a34c29ed311d9c4c3b9eacdc5208c213adeb6ea247dbeb9081e2acf3a354fa

  • SHA512

    4c51b329c0070ba2ef05c1d689fc680a966eade8d39753360f46084a9ab5229ef7eead98e2d0774ffc426e673d70901c573f6c8a615b02283b5ae981af1f9b8b

  • SSDEEP

    24576:bahKO6SHRej4CQuQQBVvIDw+Bif3UJwO510WLzSoHhoCdJv/wSCA:bJ0HRej4u7BVvmycwO51Namo+t

  Score

  3^/10
  behavioral3behavioral4

• • Target

    doc-0a43862f-fa4e-4402-826f-08b910d79ed4.lnk

  • Size

    1KB

  • MD5

    a5c23348c8b4dabf839cd857919948b3

  • SHA1

    6a57f8583f5704709051b2175bfe72daf1d21765

  • SHA256

    667923db3ec71a122a52c895260e64568207c0eea7697d92c4df14428c911b20

  • SHA512

    dfff66c6b69dcde0b164397dae47f3ca61dbbd00fb3fcaf1d8f10b8dc95ec6d496aa733d1845ecb4696c409acee5b4ef03ddf564c571da1dfa2b988294cf88e3

  Score

  10^/10

  icedid976968029bankerloadertrojan

  • IcedID, BokBot

    IcedID is a banking trojan capable of stealing credentials.

    trojanbankericedid

  • Blocklisted process makes network request

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  behavioral5behavioral6