Extracted

• • Target
    Document_09_13_617.js
  • Size 44KB
  • SHA256 9bb9e0d33d74a56fa1eeaea35fe0c0791303c2f81ea61d1c91a9a5c08f3f1bb7
  • MD5 4bc2420ce8f7d9a440b8e79e8fc6832a
  • SHA1 bb9b38ed922757669d05476cfcb6ed45332caee4
  • SHA512 f98b7553ed13031b0eaa4739e61e485b95b2adbdf68c912caece62b1357e694c80ea7b99f7b3d4f442fe6732555a54c0e0ffa8ea7544c1c2675d6e2a50d1f69b
  • SSDEEP 384:eYpS664vE0Fpy4OtWbZCoO1ok7jzc56eFs4/EaNBkBNjHADr+L/fM9s+g3CtF2WD:HarbP1Z1EsS0E2RtD1rUCYAEq4t
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  icedid1638996626bankerloadertrojan

  • IcedID, BokBot

    IcedID is a banking trojan capable of stealing credentials.

    trojanbankericedid

  • Downloads MZ/PE file

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2