Extracted

Extracted

• • Target

    Unpaid_03_17_Copy#82.js

  • Size

    12KB

  • MD5

    bef0e81b04fdf1c19a5c7fee8e1974e4

  • SHA1

    956020f277d64abfe742ba8687853f6fc5052689

  • SHA256

    f1481a3f86cdaee1e707bb93e26adedf3bb7665ed840431c6c1c473a41e9fa67

  • SHA512

    940d4629db1a91d292c8537cad16b16bc04ac3b2f28f3dcf2eeba7910b22b841d4ec815f66a88c82e9258dff04ea8bcd13626752a063ef313416c0f9a6404d2c

  • SSDEEP

    192:zm0KUNutRNkR3aEfiHEiAuaWF3Kc0medXPcNjPnqUOR6n6m2Kj:z4UNu3NIaXEifRKc08Nj/rjF

  Score

  10^/10

  icedid946873669bankerloadertrojan

  • IcedID, BokBot

    IcedID is a banking trojan capable of stealing credentials.

    trojanbankericedid

  • Blocklisted process makes network request

  • Downloads MZ/PE file

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Loads dropped DLL

  behavioral1behavioral2