Extracted

• • Target

    2da0b937-aa51-3ea7-a191-69aa951fe75b.js

  • Size

    54KB

  • MD5

    e11d27dad9d6a484061fed8406b1b4ba

  • SHA1

    7a97b146c0ecac61b41a267b45c66fb9ae9e26cd

  • SHA256

    bef13d6455aa5e949c2952d609fd09e34e53b7ead3b3d84c3018e489fb1f027f

  • SHA512

    d0c0db630c0dc813898989cb437d2922e5a53c14792a3487ce560bace02ea6ea50af669e134850a2ec5ef1f3fce08a716a01f166f7b467b39ec042c38c00e1c5

  • SSDEEP

    768:eO9Gvm/iZquBaXkiEhLGgwHi+7GobjM2Eg60cvmqr:eO9GddwHi+7xjVEvZvmI

  Score

  10^/10

  icedid548427575bankerloadertrojan

  • IcedID, BokBot

    IcedID is a banking trojan capable of stealing credentials.

    trojanbankericedid

  • Downloads MZ/PE file

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Loads dropped DLL

  behavioral1behavioral2