Extracted

• • Target
    attachment.zip
  • Size 998KB
  • SHA256 7f1a57e2fb242de0487f350dae701b02b59c9d0de3cd371b7c73b69b35f96c94
  • MD5 6300388554c9bfdd134447ae324cbe8b
  • SHA1 793323912e40ccb88c269cc13015c737aa9fedea
  • SHA512 60b9a02a5d75d81d94df3ed3e2f10dadb40bb4f8bca32d7b58a9203a1a7f8a4d0600c2c9ae1970abe31e0c66802406dcfbcfc29be56a079dfd766f00520d73e4
  • SSDEEP 24576:mRqnw7OYhDdxMuowMz8FDevmQun7oiCxn:7wKYhJxMuNdJevG70xn
  • MD5 SHA1 SHA512 SSDEEP

  Score

  1^/10
  behavioral1behavioral2
• • Target
    document-daboya_decussate.iso
  • Size 1.4MB
  • SHA256 83d9a9bc7ad3208b597b4cd8a0afa5be60128cbda6614498f6ec6992f0adb597
  • MD5 95afffaa452a7023f4755a0cd311d6fe
  • SHA1 13016254951a11903db0958dc0b2340aa5967bdf
  • SHA512 3fa1f86a618a4f06dd0ff5e0dd969944792db6b936422f994bd08f5afe8898b3296c7bda1a7c44385444b3994e0d35bb389ec5de9531bbdcb4778fbc7de838af
  • SSDEEP 24576:uVYn34MpdJGWFL70U38zEpd0urvKLtluJHtTQ:uV+9WWRRzLeluJ9Q
  • MD5 SHA1 SHA512 SSDEEP

  Score

  3^/10
  behavioral3behavioral4
• • Target
    abloom_hullos_natatorial.db
  • Size 56KB
  • SHA256 fc8430951bc1451081327b8b91f82b1b65e2957cd02a16d7d21c307f08418d39
  • MD5 be6b96289c2adef0f232bf0723be3239
  • SHA1 b3c226b9de201cfaeaf8cefdaf30d50e1c32e10a
  • SHA512 bfd149d8fcebc1bad67790c65d7b0e9ef8bd8b50dd34f6c2f6f046fcb2613d0def5284db301362b71d3c90263ce557fc2593bbcc3cc0ea877fe91af18bcfc832
  • SSDEEP 1536:Ud2kNuUPC30mX7o7z91KzMdyKXvD2GZ58fi1KihIgvLT+:42ou2CT7IEGrZLT
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  icedid56237520bankerloadertrojan

  • IcedID, BokBot

    IcedID is a banking trojan capable of stealing credentials.

    trojanbankericedid

  • Blocklisted process makes network request

  behavioral5behavioral6
• • Target
    document-daboya_decussate.lnk
  • Size 1KB
  • SHA256 38ad4ad3e565e73d117f2fab1de62b0c2e71269fc25405a0a4e6511fd03398e0
  • MD5 0f998bd2f51a52cc1fa4fa4cca82f577
  • SHA1 70e65385ef463204016f51c83f50af16c2c40f03
  • SHA512 0c9ef178e2e0a8b37b12105668865688cf49ddb3f7f026d49c735aa152173dde8c6601883bb0c53d7914dc28350863e36257c04e3d6f1acc453f4abbcf25cfbe
  • MD5 SHA1 SHA512

  Score

  10^/10

  icedid56237520bankerloadertrojan

  • IcedID, BokBot

    IcedID is a banking trojan capable of stealing credentials.

    trojanbankericedid

  • Blocklisted process makes network request

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  behavioral7behavioral8
• • Target
    metallurgic_isopelletierine_cellarwoman.cmd
  • Size 84B
  • SHA256 71bed4fedb2cb8b875f6ecdc61717caff595a2852463e7f08bf4bb6851cedec2
  • MD5 3bca5e9caaa26fdcd0f9a35f39d3157c
  • SHA1 7f297331cd490f5a937faaf5659da24c7ceef870
  • SHA512 a11c8b89d52e14010cf54eaf88e0b0776c97f2d57668bab76fffda44b3c01564b8387a2ce83fa74abf343395c3f3c0b4e14cc17a89bfa58deacd9928e9018368
  • MD5 SHA1 SHA512

  Score

  10^/10

  icedid56237520bankerloadertrojan

  • IcedID, BokBot

    IcedID is a banking trojan capable of stealing credentials.

    trojanbankericedid

  • Blocklisted process makes network request

  behavioral9behavioral10
• • Target
    oncometric_curvifoliate_balladier.png
  • Size 961KB
  • SHA256 373f440ac58d5e2e91ec33c68fbe4977d8e4643e023b9035f537a018cca540f6
  • MD5 677d7286bdf7402711dcdd0193355a96
  • SHA1 7078ed0dadb5bf921233cda581993cace70fc516
  • SHA512 8bd6d13fe53122d4e5ffb75d67df86ee11dcc5e71756861e0ea8b497bc664db0b29971847f7e4f02bd4f052f0aef99b67550b1b0ef632be190d13c25d5c5a4d2
  • SSDEEP 24576:rVYn34MpdJGWFL70U38zEpd0urvKLtluJHtTQq:rV+9WWRRzLeluJ9Qq
  • MD5 SHA1 SHA512 SSDEEP

  Score

  3^/10
  behavioral11behavioral12