General
- Target iceix_1.2.0.0.vir
- Size 145KB
- Sample200719-qfne53b3ae
- SHA256 fa4bd653c43c8c9ce265eba2bd425962752b062fea81327d3cd5338b545d611e
- MD5 4581c813cbc584530b75c58c30d8b29b
- SHA1 ae17112eff30ff1daacac943e5551a31f7e896a6
- SHA512 7272b1cc00db4355709794fd39cc1bf281d636f12dbd4538aee1b5f15eebbb7676a9297fd1e54766348865b5f5794f2dd93d10b566422702f4c6555bbb66634f
- MD5 SHA1 SHA512
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
iceix_1.2.0.0.vir.exe
Resource
win7v200430
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
iceix_1.2.0.0.vir.exe
Resource
win10
0 signatures
0 seconds
Malware Config
Targets
-
- Target iceix_1.2.0.0.vir
- Size 145KB
- SHA256 fa4bd653c43c8c9ce265eba2bd425962752b062fea81327d3cd5338b545d611e
- MD5 4581c813cbc584530b75c58c30d8b29b
- SHA1 ae17112eff30ff1daacac943e5551a31f7e896a6
- SHA512 7272b1cc00db4355709794fd39cc1bf281d636f12dbd4538aee1b5f15eebbb7676a9297fd1e54766348865b5f5794f2dd93d10b566422702f4c6555bbb66634f
- MD5 SHA1 SHA512
Score8/10-
Executes dropped EXE
-
Modifies Windows Firewall
-
Deletes itself
-
Loads dropped DLL
-
Adds Run key to start application
-
Modifies service
-
Suspicious use of SetThreadContext