General

  • Target

    Icecream Screen Recorder.rar

  • Size

    31.3MB

  • MD5

    10c450a16154bb10a35837eedb019977

  • SHA1

    0793c5714fed3d1a0247439d472d15e4953596c4

  • SHA256

    b0cbb8afe8cd4eef968909c1a64c02aaf0e8b5b22e1aec46708d2151767a3d9f

  • SHA512

    c4168e6200a60dbfafd61d7e79a4c394097d438994e63a79cef07ac20c7073832f1ecebf4ff3ca730f51dd1f32e281686df25cbabe6b8d1f1a9b56738a0440a4

  • SSDEEP

    786432:pHHCxM4vPcxexKNDEd/jBFGCNXnPGmAWEFu5AP5b+FtXCeAnZ:pHHCxM4vPsZEdqCdHAJhGXbAnZ

Score
10/10

Malware Config

Signatures

  • Privateloader family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Icecream Screen Recorder.rar
    .rar
  • CrashRpt1403.dll
    .dll windows:6 windows x64 arch:x64

    1f538bfa26a057bded62c34d0ee5b88f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • D3DCaptureHook32.dll
    .dll windows:6 windows x86 arch:x86

    03988d4ac4bb468d61536e52a891774b


    Code Sign

    Headers

    Imports

    Sections

  • D3DCaptureHook64.dll
    .dll windows:6 windows x64 arch:x64

    dc0f1f67dcac7381aee43b56338546c1


    Code Sign

    Headers

    Imports

    Sections

  • EasyHook32.dll
    .dll windows:6 windows x86 arch:x86

    4557d7530177a52b9338ffbd3c0273e5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • EasyHook64.dll
    .dll windows:6 windows x64 arch:x64

    7c733a77800d92600b3d036b64da29bb


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • InjectHelper32.exe
    .exe windows:6 windows x86 arch:x86

    2746d7325020aefa9bff80d192456376


    Code Sign

    Headers

    Imports

    Sections

  • InjectHelper64.exe
    .exe windows:6 windows x64 arch:x64

    4256eb7700c35af905002445727f738d


    Code Sign

    Headers

    Imports

    Sections

  • Qt5Core.dll
    .dll windows:6 windows x64 arch:x64

    89e42e9bec63b1ede39028faad8bc8da


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Qt5Gui.dll
    .dll windows:6 windows x64 arch:x64

    adb9c0f3333e0154715b94e3a65c2aa0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Qt5Multimedia.dll
    .dll windows:6 windows x64 arch:x64

    8c3d28ea96775935604075df2dec2f77


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Qt5Network.dll
    .dll windows:6 windows x64 arch:x64

    8f8f5a9652f73fbfb5f519c685693e29


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Qt5NetworkAuth.dll
    .dll windows:6 windows x64 arch:x64

    6e85ba749a72df8129090f33d4e466d2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Qt5OpenGL.dll
    .dll windows:6 windows x64 arch:x64

    b5c5ae5e9cd0dd802ad61447d60a76fe


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Qt5Svg.dll
    .dll windows:6 windows x64 arch:x64

    4b9f61ba07e09a43286a25d03c631385


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Qt5Widgets.dll
    .dll windows:6 windows x64 arch:x64

    dbad8b6dcac9dfc5bf8a983107a713ec


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Qt5WinExtras.dll
    .dll windows:6 windows x64 arch:x64

    77a3fd7b858955008f07aa06d73ef71f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • QtAV1.dll
    .dll windows:6 windows x64 arch:x64

    a8aeaff26ada4d041e17a5ddb73f1d61


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • QtAVWidgets1.dll
    .dll windows:6 windows x64 arch:x64

    ac10b5c5b6c03fbf1cdb73bc7a88e660


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Uninstall.dat
  • Uninstall.exe
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections

  • avcodec-58.dll
    .dll windows:6 windows x64 arch:x64

    488704f337f50e27a562516a020ed650


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • avdevice-58.dll
    .dll windows:6 windows x64 arch:x64

    4e32c0a5ef052a04f0a887f13e051532


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • avfilter-7.dll
    .dll windows:6 windows x64 arch:x64

    d72818811a448356dc98a03893c838e6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • avformat-58.dll
    .dll windows:6 windows x64 arch:x64

    378727eceea4396c654856c91fec166e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • avutil-56.dll
    .dll windows:6 windows x64 arch:x64

    e7e20a621382ab3b2af9336d7fe34a55


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • d3dcompiler_47.dll
    .dll windows:6 windows x64 arch:x64

    2ce80dc262aecd9b9f45ee13d6b30c08


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • dbghelp.dll
    .dll windows:6 windows x64 arch:x64

    79e0979e94f4b8954752e128696e22be


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ffmpeg.exe
    .exe windows:6 windows x64 arch:x64

    6cbaa14d49481ad4207fc37d441507a0


    Code Sign

    Headers

    Imports

    Sections

  • iceupdater.exe
    .exe windows:6 windows x64 arch:x64

    860d5d328e904661ad4f5683212a3fd1


    Code Sign

    Headers

    Imports

    Sections

  • imageformats/qdds.dll
    .dll windows:6 windows x64 arch:x64

    86350c5b035822f4792a4c3cf8be7805


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • imageformats/qgif.dll
    .dll windows:6 windows x64 arch:x64

    0e16134644816a81b448ae10209d3b55


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • imageformats/qicns.dll
    .dll windows:6 windows x64 arch:x64

    d1d7ffbafbb4db0666b42d55788b5159


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • imageformats/qico.dll
    .dll windows:6 windows x64 arch:x64

    1d8b3b623e9bb80b11a33bbfc518793c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • imageformats/qjpeg.dll
    .dll windows:6 windows x64 arch:x64

    936021d74c9b11993eaf08dcdeb2ee3b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • imageformats/qsvg.dll
    .dll windows:6 windows x64 arch:x64

    b39dc058b544d9e556587a5e697ddd4c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • imageformats/qtga.dll
    .dll windows:6 windows x64 arch:x64

    b8afc8585d723d9ab276ba73e1bd2546


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • imageformats/qtiff.dll
    .dll windows:6 windows x64 arch:x64

    ab2f864429f930ba88df7438cc4f117b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • imageformats/qwbmp.dll
    .dll windows:6 windows x64 arch:x64

    f5dea7fb677575982aa2d2d1e9b72327


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • imageformats/qwebp.dll
    .dll windows:6 windows x64 arch:x64

    b365c4dcb0cf182c6bee36071a2b6ecc


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • libcrypto-1_1-x64.dll
    .dll windows:6 windows x64 arch:x64

    4f333150ac79baf1b9a9d8a63b224989


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • libcurl.dll
    .dll windows:6 windows x64 arch:x64

    a151106858e821da5c428774e0128835


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • libeay32.dll
    .dll windows:4 windows x64 arch:x64

    96c4f4e8917dc64df4c59957846701ef


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • libmp3lame.dll
    .dll windows:6 windows x64 arch:x64

    59d603cfa32f222002ee5fff7a9b8b92


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • libssl-1_1-x64.dll
    .dll windows:6 windows x64 arch:x64

    527f8dd2c1e018e813109536ce41d7b0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • mediaservice/dsengine.dll
    .dll windows:6 windows x64 arch:x64

    ae8c394a941049244a79dbaef7d54998


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • mediaservice/qtmedia_audioengine.dll
    .dll windows:6 windows x64 arch:x64

    dd3ebef5226c1a3cf58d2da9269a587b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • mousehelper.dll
    .dll windows:6 windows x64 arch:x64

    d7a50362924f7f1f99bf8ff73f1fa470


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvcp100.dll
    .dll windows:5 windows x86 arch:x86

    7a0d9f66efd1839f136ca6896fa52dfa


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvcp120.dll
    .dll windows:6 windows x64 arch:x64

    d0a59246eab41d54812cd63c2326e1f1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvcr100.dll
    .dll windows:5 windows x86 arch:x86

    5271d5ce8b44dd47bc92563e27585466


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvcr120.dll
    .dll windows:6 windows x64 arch:x64

    8f18e22935ef8b336e246ee763fbec97


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • opencv_world300.dll
    .dll windows:6 windows x64 arch:x64

    f530fa4e0de425b24660f87269b6e845


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • openh264.dll
    .dll windows:6 windows x64 arch:x64

    3f907e39ed058357c0213467126c5eb3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • platforms/promo.bmp
  • platforms/qwindows.dll
    .dll windows:6 windows x64 arch:x64

    22c8d9aaec6efbde87d651ec6e738ef1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • proportions.txt
  • quickshot.exe
    .exe windows:6 windows x64 arch:x64

    1bbf4f3bbbc8571b7b4aa37a74488865


    Code Sign

    Headers

    Imports

    Sections

  • recorder.exe
    .exe windows:6 windows x64 arch:x64

    cca5a0e70f49b0e63d7c01dade473e04


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ssleay32.dll
    .dll windows:4 windows x64 arch:x64

    bd6491c5c6ba4207cec8336a4d4007e8


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • swresample-3.dll
    .dll windows:6 windows x64 arch:x64

    2a69795357f138aa9891451197daae96


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • swscale-5.dll
    .dll windows:6 windows x64 arch:x64

    50285811a3f2cae9fb6865b39d035d74


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • translations/lang_af.qm
  • translations/lang_ar.qm
  • translations/lang_bg.qm
  • translations/lang_bs.qm
  • translations/lang_by.qm
  • translations/lang_cz.qm
  • translations/lang_da.qm
  • translations/lang_de.qm
  • translations/lang_el.qm
  • translations/lang_en.qm
  • translations/lang_es.qm
  • translations/lang_et.qm
  • translations/lang_fi.qm
  • translations/lang_fil.qm
  • translations/lang_fr.qm
  • translations/lang_ga.qm
  • translations/lang_ge.qm
  • translations/lang_hr.qm
  • translations/lang_hu.qm
  • translations/lang_hy.qm
  • translations/lang_id.qm
  • translations/lang_is.qm
  • translations/lang_it.qm
  • translations/lang_ja.qm
  • translations/lang_ko.qm
  • translations/lang_kz.qm
  • translations/lang_lt.qm
  • translations/lang_lv.qm
  • translations/lang_ml.qm
  • translations/lang_mn.qm
  • translations/lang_ms.qm
  • translations/lang_my.qm
  • translations/lang_nl.qm
  • translations/lang_no.qm
  • translations/lang_pl.qm
  • translations/lang_pt.qm
  • translations/lang_ro.qm
  • translations/lang_ru.qm
  • translations/lang_si.qm
  • translations/lang_sk.qm
  • translations/lang_sl.qm
  • translations/lang_sq.qm
  • translations/lang_sr.qm
  • translations/lang_sv.qm
  • translations/lang_th.qm
  • translations/lang_tr.qm
  • translations/lang_ua.qm
  • translations/lang_vn.qm
  • translations/lang_zh-cn.qm
  • vccorlib120.dll
    .dll windows:6 windows x64 arch:x64

    85727cb86aafd871280ffe38ff204b60


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • vcomp100.dll
    .dll windows:5 windows x86 arch:x86

    c80e49e03838330a5df1ad4a389497a9


    Code Sign

    Headers

    Imports

    Exports

    Sections