Extracted

• • Target
    instructor.file.11.30.docm
  • Size 764KB
  • SHA256 a0ac47bfb1e405f599111d64a3d7c254dc55da790496060e92f045837f149621
  • MD5 4aeb468ad6b94f74722a9dcbde919e8c
  • SHA1 a6aa5d722a18a0710ee359f91654432c38144769
  • SHA512 e1824293288c7333669d6e4dca7e8d177ce3aa178f3e40efc691b6b16e8d0a527bf775f35592275e22d56a4c5f3b59cdff62fbe891c9c054c266d5569fb22c79
  • SSDEEP 12288:/9aUVE9j2y+1JbeQbntrws6/GYzw6OFokpXfiiGef/DE1gNp3PRNKGh/K5:/xV2jUeQRI5wPN/GgNp3PRNKI/K5
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  icedid1313163077bankerloadertrojan

  • IcedID, BokBot

    IcedID is a banking trojan capable of stealing credentials.

    trojanbankericedid

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • Blocklisted process makes network request

  • Loads dropped DLL

  behavioral1behavioral2