Extracted

• • Target

    facts.lnk

  • Size

    1KB

  • MD5

    28c829d86eeebda80fbb7a80919ee805

  • SHA1

    b9f70882720987e2d00d7c6ef681908d208787e4

  • SHA256

    4cb696f6a50cb2b73bf9a4d68f41a44d3c2486cd3fae518179aaaf69f5746ed9

  • SHA512

    4830586a8706779dc366202c3c62b2b7055c94876f29b592ccbc200c42cfb80c6f5dcec2af7819c9f1b26318b48945bfc09c8705884ad833cc76bb08468e374f

  Score

  10^/10

  icedid2959887884bankerloadertrojan

  • IcedID, BokBot

    IcedID is a banking trojan capable of stealing credentials.

    trojanbankericedid

  • Executes dropped EXE

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Loads dropped DLL

  behavioral1behavioral2

• • Target

    mountaineers/sold.cmd

  • Size

    377B

  • MD5

    a9d13e6527c49efcc49b4ff8d0303e0d

  • SHA1

    dc24b9021542e60172d5bd87eeb05a7a88d2fa25

  • SHA256

    ecd3014dc55f0f77c1f9c98522749c3633e2c0d6302725e0334ae8eb0ea1cc3c

  • SHA512

    4d74c713aa686d0f6780674ba965611f70c9c71ea56878c4ed28890483cb57a8bb8ed5a04a8666fb466594c99c405d442a7ad1d5ea850c4ecc6874b7ab56a2d1

  Score

  1^/10
  behavioral3behavioral4