General
- Target 29c7d7d36a0c8acec88ff7aa34adc0f9240270a85e330fd2336408e1f0d52c21.bin.exe
- Size 347KB
- Sample221110-bf3z8afcep
- SHA256 29c7d7d36a0c8acec88ff7aa34adc0f9240270a85e330fd2336408e1f0d52c21
- MD5 799a7f1507e5e7328081a038987e9a6f
- SHA1 7cd8dce5c61cda4e13b5865b67a7fb846ef9a627
- SHA512 a3f5a920dd53d31facb81fc5842654e53ad53d3bf6a0f935e9b152540a4b42e9a7da6e56e1243f914854ad0d1611646b8e98fe6ef725dff48c96715cdcc68197
- SSDEEP 6144:ibslI7wgOZ1WMYORbmV9bAq11yVQhAyPl7/s:ibvwBEMtQAM1yVQhAyPl7/s
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Behavioral task
behavioral1
Sample
29c7d7d36a0c8acec88ff7aa34adc0f9240270a85e330fd2336408e1f0d52c21.bin.exe
Resource
win7-20220812-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
29c7d7d36a0c8acec88ff7aa34adc0f9240270a85e330fd2336408e1f0d52c21.bin.exe
Resource
win10v2004-20220901-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
icexloader
C2
-
http://45.155.165.151/Server/Script.php
Targets
-
- Target 29c7d7d36a0c8acec88ff7aa34adc0f9240270a85e330fd2336408e1f0d52c21.bin.exe
- Size 347KB
- SHA256 29c7d7d36a0c8acec88ff7aa34adc0f9240270a85e330fd2336408e1f0d52c21
- MD5 799a7f1507e5e7328081a038987e9a6f
- SHA1 7cd8dce5c61cda4e13b5865b67a7fb846ef9a627
- SHA512 a3f5a920dd53d31facb81fc5842654e53ad53d3bf6a0f935e9b152540a4b42e9a7da6e56e1243f914854ad0d1611646b8e98fe6ef725dff48c96715cdcc68197
- SSDEEP 6144:ibslI7wgOZ1WMYORbmV9bAq11yVQhAyPl7/s:ibvwBEMtQAM1yVQhAyPl7/s
- MD5 SHA1 SHA512 SSDEEP
Score7/10-
Drops startup file
-
Adds Run key to start application