Extracted

Extracted

• • Target

    69e2bc37da2c8a6f25fce37a024aca628f8216cb0ddcf70e1e55766eae011bf2

  • Size

    70KB

  • MD5

    3f031c12c95a4b52b74e08d4b0d76830

  • SHA1

    3a6443c08d8233b4e62e3ab47950061620225e75

  • SHA256

    69e2bc37da2c8a6f25fce37a024aca628f8216cb0ddcf70e1e55766eae011bf2

  • SHA512

    ab271d995c7de00466cd8a84dc5f63b25ec866bd0c61ba0decfaa951091718bf9a35412b7b14ec046fb131d7641bcb73486f524820fd9d3d29413ce03a2e2d71

  • SSDEEP

    1536:iXUu70LgnxWl7f/3jWCgiMthg8Mi3lHg9gIgmfgCjMiAOqTu/+vXWPbge96Lr4hH:iwL6W5fPKCNAXMixmHBfFzmu/mAbgwzh

  Score

  10^/10

  discoveryicedid497724135bankerloadertrojan

  • IcedID, BokBot

    IcedID is a banking trojan capable of stealing credentials.

    trojanbankericedid

  • Icedid family

    icedid

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • Blocklisted process makes network request

  • Loads dropped DLL

  behavioral1behavioral2