Overview

overview

8

Static

static

1

IcebergSoftware.exe

windows10-1703-x64

8

IcebergSoftware.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    IcebergSoftware.exe

  • Size

    2.6MB

  • Sample

    231125-wecf4abg84

  • MD5

    39414226c836b5223e1f07ba0f34a530

  • SHA1

    a8008addd203893fa4d9d6271077ca17a11418f7

  • SHA256

    f210781db41f4ee99416d824c95fd8d337f08722b79321f62e068dce24fefa7c

  • SHA512

    b95077e2f9ce12454b4f191fda3154c5b83b92d04125358e9c302ae56202c44fcabcf385b030fc40480d0c49e1269444419f4e0510853b98e1447b062cf90129

  • SSDEEP

    24576:iP3icqIhvSni+BELno3loaumVlS1Of48ROhRVJr8cTB5j/8/qacqQ+s6FXjoAAfn:iPywxSjTlS1TxHjiS6s6uDhC4P+H8h

Score
8/10

Malware Config

Targets

    • Target

      IcebergSoftware.exe

    • Size

      2.6MB

    • MD5

      39414226c836b5223e1f07ba0f34a530

    • SHA1

      a8008addd203893fa4d9d6271077ca17a11418f7

    • SHA256

      f210781db41f4ee99416d824c95fd8d337f08722b79321f62e068dce24fefa7c

    • SHA512

      b95077e2f9ce12454b4f191fda3154c5b83b92d04125358e9c302ae56202c44fcabcf385b030fc40480d0c49e1269444419f4e0510853b98e1447b062cf90129

    • SSDEEP

      24576:iP3icqIhvSni+BELno3loaumVlS1Of48ROhRVJr8cTB5j/8/qacqQ+s6FXjoAAfn:iPywxSjTlS1TxHjiS6s6uDhC4P+H8h

    Score
    8/10

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks