Extracted

• • Target
    e11d27dad9d6a484061fed8406b1b4ba.bin
  • Size 54KB
  • SHA256 bef13d6455aa5e949c2952d609fd09e34e53b7ead3b3d84c3018e489fb1f027f
  • MD5 e11d27dad9d6a484061fed8406b1b4ba
  • SHA1 7a97b146c0ecac61b41a267b45c66fb9ae9e26cd
  • SHA512 d0c0db630c0dc813898989cb437d2922e5a53c14792a3487ce560bace02ea6ea50af669e134850a2ec5ef1f3fce08a716a01f166f7b467b39ec042c38c00e1c5
  • SSDEEP 768:eO9Gvm/iZquBaXkiEhLGgwHi+7GobjM2Eg60cvmqr:eO9GddwHi+7xjVEvZvmI
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  icedid548427575bankerloadertrojan

  • IcedID, BokBot

    IcedID is a banking trojan capable of stealing credentials.

    trojanbankericedid

  • Downloads MZ/PE file

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Loads dropped DLL

  behavioral1behavioral2