Overview

overview

10

Static

static

10

34568d7cc3...d1.exe

windows7-x64

10

34568d7cc3...d1.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    34568d7cc3bf1a3c82438c5d6e2b8116a3e270ee18e723450e375b6e41f077d1.bin

  • Size

    347KB

  • Sample

    220719-sb6c8afffl

  • MD5

    91de3fb29c2b6b09d64e693a6a018146

  • SHA1

    91fbfd49bb7426f118ce8a9d2a781ae170da7fe1

  • SHA256

    34568d7cc3bf1a3c82438c5d6e2b8116a3e270ee18e723450e375b6e41f077d1

  • SHA512

    f8e827c8616804c90900eb69eba63c2f6c33f4ef0532adcd1eee485195d4994e891afb92151648cd17b6ffada3badfd939d6bdd9535471f5a7152c27c82e2508

Score
10/10
icexloaderloaderpersistence

Malware Config

Targets

    • Target

      34568d7cc3bf1a3c82438c5d6e2b8116a3e270ee18e723450e375b6e41f077d1.bin

    • Size

      347KB

    • MD5

      91de3fb29c2b6b09d64e693a6a018146

    • SHA1

      91fbfd49bb7426f118ce8a9d2a781ae170da7fe1

    • SHA256

      34568d7cc3bf1a3c82438c5d6e2b8116a3e270ee18e723450e375b6e41f077d1

    • SHA512

      f8e827c8616804c90900eb69eba63c2f6c33f4ef0532adcd1eee485195d4994e891afb92151648cd17b6ffada3badfd939d6bdd9535471f5a7152c27c82e2508

    Score
    10/10
    icexloaderloaderpersistence

    • icexloader

      IceXLoader is a downloader used to deliver other malware families.

      loadericexloader

    • Drops startup file

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks