Extracted

• • Target
    facts.lnk
  • Size 1KB
  • SHA256 4cb696f6a50cb2b73bf9a4d68f41a44d3c2486cd3fae518179aaaf69f5746ed9
  • MD5 28c829d86eeebda80fbb7a80919ee805
  • SHA1 b9f70882720987e2d00d7c6ef681908d208787e4
  • SHA512 4830586a8706779dc366202c3c62b2b7055c94876f29b592ccbc200c42cfb80c6f5dcec2af7819c9f1b26318b48945bfc09c8705884ad833cc76bb08468e374f
  • MD5 SHA1 SHA512

  Score

  10^/10

  icedid2959887884bankerloadertrojan

  • IcedID, BokBot

    IcedID is a banking trojan capable of stealing credentials.

    trojanbankericedid

  • Executes dropped EXE

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Loads dropped DLL

  behavioral1behavioral2
• • Target
    mountaineers/sold.cmd
  • Size 377B
  • SHA256 ecd3014dc55f0f77c1f9c98522749c3633e2c0d6302725e0334ae8eb0ea1cc3c
  • MD5 a9d13e6527c49efcc49b4ff8d0303e0d
  • SHA1 dc24b9021542e60172d5bd87eeb05a7a88d2fa25
  • SHA512 4d74c713aa686d0f6780674ba965611f70c9c71ea56878c4ed28890483cb57a8bb8ed5a04a8666fb466594c99c405d442a7ad1d5ea850c4ecc6874b7ab56a2d1
  • MD5 SHA1 SHA512

  Score

  1^/10
  behavioral3behavioral4