General
-
Target
f2900040b4ebfea4bc66d638e1986b8b5c4ca3ed5e135c23cc4b426f17db143a.bin
-
Size
348KB
-
Sample
221110-bhds4sdeh3
-
MD5
10bbabdde9fc09a120347f53cff6e024
-
SHA1
f4ae8ba0acb5a0e51f2098dc406690ac5697a66f
-
SHA256
f2900040b4ebfea4bc66d638e1986b8b5c4ca3ed5e135c23cc4b426f17db143a
-
SHA512
9d6bdc2aec727f5e1abcacd261984a365419e1b6909ab60c6864945ee6e5c803468e70d3883af47ba3155540154ad71ccad67fcdb5b81525a0c22a360c5a6567
-
SSDEEP
6144:8hf/YQ9FZtNMYORbGB9lBkQiYfyVQhAyPlI/2:8hB1bMtCBk2fyVQhAyPlI/2
Behavioral task
behavioral1
Sample
f2900040b4ebfea4bc66d638e1986b8b5c4ca3ed5e135c23cc4b426f17db143a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f2900040b4ebfea4bc66d638e1986b8b5c4ca3ed5e135c23cc4b426f17db143a.exe
Resource
win10v2004-20220812-en
Malware Config
Extracted
icexloader
https://oxygen.danshiva.com/Script.php
Targets
-
-
Target
f2900040b4ebfea4bc66d638e1986b8b5c4ca3ed5e135c23cc4b426f17db143a.bin
-
Size
348KB
-
MD5
10bbabdde9fc09a120347f53cff6e024
-
SHA1
f4ae8ba0acb5a0e51f2098dc406690ac5697a66f
-
SHA256
f2900040b4ebfea4bc66d638e1986b8b5c4ca3ed5e135c23cc4b426f17db143a
-
SHA512
9d6bdc2aec727f5e1abcacd261984a365419e1b6909ab60c6864945ee6e5c803468e70d3883af47ba3155540154ad71ccad67fcdb5b81525a0c22a360c5a6567
-
SSDEEP
6144:8hf/YQ9FZtNMYORbGB9lBkQiYfyVQhAyPlI/2:8hB1bMtCBk2fyVQhAyPlI/2
Score10/10-
Drops startup file
-
Adds Run key to start application
-