Analysis
-
max time kernel
142s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
30/12/2023, 05:33
Static task
static1
Behavioral task
behavioral1
Sample
ICEECC.chm
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
ICEECC.chm
Resource
win10v2004-20231222-en
Behavioral task
behavioral3
Sample
ICEECC.exe
Resource
win7-20231129-en
Behavioral task
behavioral4
Sample
ICEECC.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral5
Sample
新云软件.url
Resource
win7-20231215-en
Behavioral task
behavioral6
Sample
新云软件.url
Resource
win10v2004-20231215-en
General
-
Target
ICEECC.exe
-
Size
612KB
-
MD5
2ca08813d7b48bccd812492f33621f6d
-
SHA1
8ef9085de8f229562fa4db15cc168ac76088aae2
-
SHA256
c2badcc4c891d15650119ba00844d8e344d701bc455d99de34b3c5fd241aefdb
-
SHA512
0dab468f29ee07070f4632dd8eaf146975e14a4dddda4c573c7899d2642c2d5ac0a007bb4fc5af4af5c8048eec3e2986dba0ff1d3ce01e50a836666e020ce1ef
-
SSDEEP
12288:alZE2Uw5sFTtxT3hsgj+KbevwAQNN4r0+3QxLVU0dEhR4PAs:QE2Uw6FTtxDhsgSqevPQNNkoLCmA
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2152 ICEECC.exe