Extracted

• • Target
    DH-1642110028.xll
  • Size 70KB
  • SHA256 e4fdc8b6743a24bcb75957fc1c2591dd552637e33184affe233f2ec7aa694225
  • MD5 3b997ceaae98ea79e64717c1223b03b2
  • SHA1 8e5f7f54cf8e1f8d2615d70dd60e8a2cdf9108cf
  • SHA512 0d0ebac10b3c83e25086c2e7417b81fc19e803acf1c79dd7732b320b70ec2091d261001c98e8b1bc3bb1b4121fcb009a00f96c5edd307d4bd8b1eda9da037319
  • MD5 SHA1 SHA512

  Score

  10^/10

  icedid497724135bankertrojan

  • IcedID, BokBot

    IcedID is a banking trojan capable of stealing credentials.

    trojanbankericedid

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • Blocklisted process makes network request

  • Loads dropped DLL

  behavioral1behavioral2