General
-
Target
79915a1352da45f69fbd193f7bd28bba64949dfe6c2baf8090151e676aad2448.exe
-
Size
348KB
-
Sample
221122-nws66sbg59
-
MD5
6210be523c5fab6a205772fc1a6abfb4
-
SHA1
b9ad3b37702aa0187592fb39b26148d8b320b6ca
-
SHA256
79915a1352da45f69fbd193f7bd28bba64949dfe6c2baf8090151e676aad2448
-
SHA512
a98fb903c1d9f2d23a9a7a67e8bc7f27228f054105ac43413e6887ff8c0de29968b5d71218a116f7f73a814a8be4bc50b4c78c4e913c5da1b1083c51c80fbdab
-
SSDEEP
6144:ZbslI7b8btZ1WMYORbMV9bwkn8gfyVQhAyPlb/2:ZbvwnEMtWwk3fyVQhAyPlb/2
Behavioral task
behavioral1
Sample
79915a1352da45f69fbd193f7bd28bba64949dfe6c2baf8090151e676aad2448.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
79915a1352da45f69fbd193f7bd28bba64949dfe6c2baf8090151e676aad2448.exe
Resource
win10v2004-20221111-en
Malware Config
Extracted
icexloader
http://onedemandone.biz/Server/Script.php
Targets
-
-
Target
79915a1352da45f69fbd193f7bd28bba64949dfe6c2baf8090151e676aad2448.exe
-
Size
348KB
-
MD5
6210be523c5fab6a205772fc1a6abfb4
-
SHA1
b9ad3b37702aa0187592fb39b26148d8b320b6ca
-
SHA256
79915a1352da45f69fbd193f7bd28bba64949dfe6c2baf8090151e676aad2448
-
SHA512
a98fb903c1d9f2d23a9a7a67e8bc7f27228f054105ac43413e6887ff8c0de29968b5d71218a116f7f73a814a8be4bc50b4c78c4e913c5da1b1083c51c80fbdab
-
SSDEEP
6144:ZbslI7b8btZ1WMYORbMV9bwkn8gfyVQhAyPlb/2:ZbvwnEMtWwk3fyVQhAyPlb/2
Score10/10-
Drops startup file
-
Adds Run key to start application
-