General
- Target IceFree.exe
- Size 719KB
- Sample260628-d9ycyae12p
- SHA256 313109fe73a4253c8d6f85dde57b3b871318c96418b34f262ce14e5455ace304
- MD5 d2086590858273df2a16cfec1da82a9f
- SHA1 ec2f3687bfd297636f2131c8c2eea9b4ba034e80
- SHA512 84d5ff06e5ffddd2b6f2f36feb50cb29c553e514dc95b0c5b771bdd5d11db59bb59fac1e8d8ed8ff7e517cbe832841615ba62356d29561770a8ec88d64ace460
- SSDEEP 12288:HGhXXZmmyoR0Gt81PcZWg/inN6GYFkzpXtmi+ntHZHHbScfvX:H2ty6ZZOw/otmi+nnH7Sc
- TLSH T1E4F49E06F2E952E8D07BD1789696A51FFB713854073086CF63E045A91FB37E06BBA702
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
IceFree.exe
Resource
win11-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target IceFree.exe
- Size 719KB
- SHA256 313109fe73a4253c8d6f85dde57b3b871318c96418b34f262ce14e5455ace304
- MD5 d2086590858273df2a16cfec1da82a9f
- SHA1 ec2f3687bfd297636f2131c8c2eea9b4ba034e80
- SHA512 84d5ff06e5ffddd2b6f2f36feb50cb29c553e514dc95b0c5b771bdd5d11db59bb59fac1e8d8ed8ff7e517cbe832841615ba62356d29561770a8ec88d64ace460
- SSDEEP 12288:HGhXXZmmyoR0Gt81PcZWg/inN6GYFkzpXtmi+ntHZHHbScfvX:H2ty6ZZOw/otmi+nnH7Sc
- TLSH T1E4F49E06F2E952E8D07BD1789696A51FFB713854073086CF63E045A91FB37E06BBA702
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Sets service image path in registry
This determines the executable launched when a service starts. It can be used to establish persistence.
-
Executes dropped EXE
-
Indicator Removal: File Deletion
Adversaries may delete files left behind by the actions of their intrusion activity.
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1