General
- Target IceGodXyesos.exe
- Size 331KB
- Sample260619-vx8ftabs2z
- SHA256 e7571f351f6f3dad81890b810e25429121e222540416f29f21ef8f58ed1e8361
- MD5 247565e9e199882b9526bab06537be5d
- SHA1 a97d867b4208b60150a376fdabaea178d601d988
- SHA512 20052d770d6d46d4d1719318a3ce98e29d81ecf61bad85113df1cac1810ff9f40e6e604308c66653e516a58713dbb708b5885289fd246d00e2f989c8ff537a37
- SSDEEP 6144:Qa0UKRyokbzLDSCpMW90KImQinnVbU6zEnQd/hwQBjrQi33v8U:Qa0UKk7tPpwu3v
- TLSH T17474AE9033AA4679C55D92BEE055124E43F4B51AD573EB85BC8806AC9F8733CD38C29F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
IceGodXyesos.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
IceGodXyesos.exe
Resource
win11ltsc2024-20260618-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target IceGodXyesos.exe
- Size 331KB
- SHA256 e7571f351f6f3dad81890b810e25429121e222540416f29f21ef8f58ed1e8361
- MD5 247565e9e199882b9526bab06537be5d
- SHA1 a97d867b4208b60150a376fdabaea178d601d988
- SHA512 20052d770d6d46d4d1719318a3ce98e29d81ecf61bad85113df1cac1810ff9f40e6e604308c66653e516a58713dbb708b5885289fd246d00e2f989c8ff537a37
- SSDEEP 6144:Qa0UKRyokbzLDSCpMW90KImQinnVbU6zEnQd/hwQBjrQi33v8U:Qa0UKk7tPpwu3v
- TLSH T17474AE9033AA4679C55D92BEE055124E43F4B51AD573EB85BC8806AC9F8733CD38C29F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
Adds Run key to start application
-
Drops desktop.ini file(s)
-
Hide Artifacts: Hidden Files and Directories
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
1Winlogon Helper DLL
1Privilege Escalation
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
1Winlogon Helper DLL
1