Extracted

Extracted

• • Target

    e4fdc8b6743a24bcb75957fc1c2591dd552637e33184affe233f2ec7aa694225

  • Size

    70KB

  • MD5

    3b997ceaae98ea79e64717c1223b03b2

  • SHA1

    8e5f7f54cf8e1f8d2615d70dd60e8a2cdf9108cf

  • SHA256

    e4fdc8b6743a24bcb75957fc1c2591dd552637e33184affe233f2ec7aa694225

  • SHA512

    0d0ebac10b3c83e25086c2e7417b81fc19e803acf1c79dd7732b320b70ec2091d261001c98e8b1bc3bb1b4121fcb009a00f96c5edd307d4bd8b1eda9da037319

  • SSDEEP

    1536:bXUu709gnZkl7f/3jWCgiMthg8Mi3lHg9gIgmfgCjMiAOqTu/+vXWPbge96LM4hH:bw9ek5fPKCNAXMixmHBfFzmu/mAbgw2h

  Score

  10^/10

  discoveryicedid497724135bankerloadertrojan

  • IcedID, BokBot

    IcedID is a banking trojan capable of stealing credentials.

    trojanbankericedid

  • Icedid family

    icedid

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • Blocklisted process makes network request

  • Loads dropped DLL

  behavioral1behavioral2