Overview
overview
3Static
static
3IcarusMacr...er.exe
windows10-2004-x64
1IcarusMacr...er.exe
windows11-ltsc_2024-x64
1IcarusMacr...64.dll
windows10-2004-x64
1IcarusMacr...64.dll
windows11-ltsc_2024-x64
1IcarusMacr...64.dll
windows10-2004-x64
1IcarusMacr...64.dll
windows11-ltsc_2024-x64
1IcarusMacr...64.dll
windows10-2004-x64
1IcarusMacr...64.dll
windows11-ltsc_2024-x64
1IcarusMacr...64.dll
windows10-2004-x64
1IcarusMacr...64.dll
windows11-ltsc_2024-x64
1IcarusMacr...64.dll
windows10-2004-x64
1IcarusMacr...64.dll
windows11-ltsc_2024-x64
1IcarusMacr...64.dll
windows10-2004-x64
1IcarusMacr...64.dll
windows11-ltsc_2024-x64
1IcarusMacr...64.dll
windows10-2004-x64
1IcarusMacr...64.dll
windows11-ltsc_2024-x64
1IcarusMacr...40.dll
windows10-2004-x64
1IcarusMacr...40.dll
windows11-ltsc_2024-x64
1IcarusMacr..._1.dll
windows10-2004-x64
1IcarusMacr..._1.dll
windows11-ltsc_2024-x64
1IcarusMacr...io.dll
windows10-2004-x64
1IcarusMacr...io.dll
windows11-ltsc_2024-x64
1IcarusMacr...z2.dll
windows10-2004-x64
1IcarusMacr...z2.dll
windows11-ltsc_2024-x64
1IcarusMacr...es.dll
windows10-2004-x64
1IcarusMacr...es.dll
windows11-ltsc_2024-x64
1IcarusMacr...al.dll
windows10-2004-x64
1IcarusMacr...al.dll
windows11-ltsc_2024-x64
1IcarusMacr...ee.dll
windows10-2004-x64
1IcarusMacr...ee.dll
windows11-ltsc_2024-x64
1IcarusMacr...ib.dll
windows10-2004-x64
1IcarusMacr...ib.dll
windows11-ltsc_2024-x64
1General
- Target IcarusMacroMaker_0-5-5.zip
- Size 29.7MB
- Sample260710-wl77cad18m
- SHA256 6d193babfc3996e277431a4f3a46e24c6b96f63d719a6000014198f44126a3ee
- MD5 b069abe6dee6b113af442b897a6aaf7f
- SHA1 5b071836333666278986dbfe70580868e73e21a3
- SHA512 e068a8ee92f3be0e206208610102dca7df80ec0f69471086cf8f123b81d86d16812953429a3bebb7ef329afadca8ff16942b7f8eaf31b86dad8ff3649cc0e611
- SSDEEP 786432:BX99dwuBdoXAy4QPdXt1mj6fIsB6edNGR73p4wb3jfPXQX1:ddwidcATQPr9fIeep4cTnAl
- TLSH T1D2673373DC891041C80F6431656DAB16E2953B941E455F8E27B30B9C38FF446EA3AFAE
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
IcarusMacroMaker/IcarusMacroMaker.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
IcarusMacroMaker/IcarusMacroMaker.exe
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral3
Sample
IcarusMacroMaker/_internal/81d243bd2c585b0f4821__mypyc.cp314-win_amd64.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
IcarusMacroMaker/_internal/81d243bd2c585b0f4821__mypyc.cp314-win_amd64.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
IcarusMacroMaker/_internal/PIL/_avif.cp314-win_amd64.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
IcarusMacroMaker/_internal/PIL/_avif.cp314-win_amd64.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
IcarusMacroMaker/_internal/PIL/_imaging.cp314-win_amd64.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
IcarusMacroMaker/_internal/PIL/_imaging.cp314-win_amd64.dll
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral9
Sample
IcarusMacroMaker/_internal/PIL/_imagingcms.cp314-win_amd64.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
IcarusMacroMaker/_internal/PIL/_imagingcms.cp314-win_amd64.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
IcarusMacroMaker/_internal/PIL/_imagingmath.cp314-win_amd64.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
IcarusMacroMaker/_internal/PIL/_imagingmath.cp314-win_amd64.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
IcarusMacroMaker/_internal/PIL/_imagingtk.cp314-win_amd64.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
IcarusMacroMaker/_internal/PIL/_imagingtk.cp314-win_amd64.dll
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral15
Sample
IcarusMacroMaker/_internal/PIL/_webp.cp314-win_amd64.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
IcarusMacroMaker/_internal/PIL/_webp.cp314-win_amd64.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral17
Sample
IcarusMacroMaker/_internal/VCRUNTIME140.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
IcarusMacroMaker/_internal/VCRUNTIME140.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral19
Sample
IcarusMacroMaker/_internal/VCRUNTIME140_1.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
IcarusMacroMaker/_internal/VCRUNTIME140_1.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral21
Sample
IcarusMacroMaker/_internal/_asyncio.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
IcarusMacroMaker/_internal/_asyncio.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral23
Sample
IcarusMacroMaker/_internal/_bz2.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
IcarusMacroMaker/_internal/_bz2.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral25
Sample
IcarusMacroMaker/_internal/_ctypes.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
IcarusMacroMaker/_internal/_ctypes.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral27
Sample
IcarusMacroMaker/_internal/_decimal.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
IcarusMacroMaker/_internal/_decimal.dll
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral29
Sample
IcarusMacroMaker/_internal/_elementtree.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
IcarusMacroMaker/_internal/_elementtree.dll
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral31
Sample
IcarusMacroMaker/_internal/_hashlib.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
IcarusMacroMaker/_internal/_hashlib.dll
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target IcarusMacroMaker/IcarusMacroMaker.exe
- Size 6.0MB
- SHA256 dab48728ac8f29a956b4d1d4b52abab639d54f4ff33626a8368d30885e0ceaa5
- MD5 f45aca104b61eb11a04fb2b1851da09a
- SHA1 7abbd6e795866dd589c4039862b616fd0e877232
- SHA512 2da925816a252ff2dab053158d112631f3bf426cf2f85d2e36f24123a89941ad447813c311ccd5f62931ea2aed783cd50c0ae51b24b2d2a603d5f7fba51a9d78
- SSDEEP 196608:8NrpHsySgNaSCrTFdZRgF5GeS/ZHqe2eDE:QrpHsylaSCvZYIeS/Z2eo
- TLSH T108563354A5B519E6EDA3803EADA6C452E3B378201B76C9CF039C57392F372C55A3A730
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target IcarusMacroMaker/_internal/81d243bd2c585b0f4821__mypyc.cp314-win_amd64.pyd
- Size 211KB
- SHA256 ab64835b63093c31975df2692756c8008e7ec190e4aa86f15a713bcc62e1d432
- MD5 2ff9d894ba5e8f7880f0031866203995
- SHA1 dd594003fb744f4b2b944e1b10b78a7026e72104
- SHA512 461ad7a749cc6131a77883de4108f20922d85618030f5f640da22e95df7db61fe358790e955204bd71efc873b726c130d71f9fb5193e91ec82718d8d19b43a1b
- SSDEEP 6144:B8O7Q321soEr5HXN1GY8DNExkP8VXaVHaT8fyFmiGJZMzIfAf1+mrlpL:BT7Q3ZH98LnYlpL
- TLSH T15324173951580061ECB74275CD67E453EAB2F222473192CF09E0CA761F2B7E5BE79B0A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target IcarusMacroMaker/_internal/PIL/_avif.cp314-win_amd64.pyd
- Size 7.5MB
- SHA256 7ab7864c7c5241827775b3574888687b42876a5291c180134428b2d4efc9e90f
- MD5 cdb459cfd6ae6fbe5a8c39a8c47ab475
- SHA1 396f7159aaa6a98286d91360376991d0d704c390
- SHA512 b6e7cb34e72be61e10b4611ae9bfb9aa9d86ff551ca240b304b29fd94b909c3478433d841d7350b2a660b8f7e16d2b239ef4357406e0e9c0f21ed1ea19dd29dd
- SSDEEP 196608:qJnInaq6JONGffIIANhsCEgJ2oxj59E2TfeZRlGmCWBTn1/jOdpjHLw6qyFNMvps:QInaq6SGnIIANhsCEgJ2oxj59E2TfeZs
- TLSH T14586D08AF19391E8D22384B4857BA716FB24342E9715527B33E6C5297F937E04B2EF01
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target IcarusMacroMaker/_internal/PIL/_imaging.cp314-win_amd64.pyd
- Size 2.5MB
- SHA256 9dcf7603d7cbcaf959efc4a03131818c029c00d9a5af66654ccefc75aebd2d64
- MD5 3b8db304b42531ac80584840769c2b14
- SHA1 b561af10371d87e233ce414372e51aab3d5d7595
- SHA512 348e0cb6350a0743a76a03e6e81c3ba60f1854cd2d2f823b4e6c5c79223dd79528be563e6822811be058d7c633feb5d4e1b1bedbaec554becd50e20912b753f6
- SSDEEP 49152:4qBmEZVe9EsEY7qjiK4XMhtE+oeGridCnI7eMnv16:SMTENidCTMv
- TLSH T1EEC57C06E9E19599C6B28034CDA6C116E3B1B80D17F187F77684A7F93E23BD0353A396
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target IcarusMacroMaker/_internal/PIL/_imagingcms.cp314-win_amd64.pyd
- Size 263KB
- SHA256 c0ee398b14e2bc0b3871039b88c3b004e26fe7c477e66ef243969c47c5f1a255
- MD5 d36676e00e95c12711e57d0fa53c376a
- SHA1 8b4c9ec6f510361e2ed546e15a660faaf99c618e
- SHA512 413584a803accca26e5c9fe02116c6d440df2acedea4708f684ac41b8f68c681a368274766e0eb1d295e74d0d29700382f8007d9ddd40a94b17a3c04e07f91fd
- SSDEEP 6144:+HR0PuGv6jYRI7O3hELmLg9uP1+74/LgHmPr9qvZqhLaHLTLrLfqeqwLjlKx9xjG:8GP5thELmLg9uP1+74/LgHmPr9qvZqhE
- TLSH T1F5442856A2981CF9D477E139D193A50BD7F138220321D6EF46A08EAE1F17BE5293F342
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target IcarusMacroMaker/_internal/PIL/_imagingmath.cp314-win_amd64.pyd
- Size 25KB
- SHA256 f7f2b978ff8b63348bf3571d4a9d62fc5867e54ebcbead34ab3201ef9d27b8dd
- MD5 a34c30114421ec93085d0edaf5eea2cb
- SHA1 981ab74d603a382b3c3aa3293600ad4e41204500
- SHA512 5c7092bb59008fe7c2e975fe92106d9d19784b78cab05a3a5b65f8108a93f97442847c233884c2d41463ca454f4b964d65316f0d46f4b459b6a3ddbd70aa42b7
- SSDEEP 192:z6wv8mmOmBtlkL8kL4xM8ykTmtZ1rOgInzobAi0RBBXo4tDHel7geAsJQFx0K:B8ms75C8ykTsIzIz0ZXSl9AsJG
- TLSH T1C7B2E79D5F601899C62B433F8C6209895221785353A09FDF86A3F19A2B93FC35E3EF54
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target IcarusMacroMaker/_internal/PIL/_imagingtk.cp314-win_amd64.pyd
- Size 14KB
- SHA256 0baad511efedf0f5ef476382a6bb67162c0b8254fa9d35320ae00545bf4af186
- MD5 bfe9bb112fecc49062b3b55278910914
- SHA1 62447e3f788a5a7c26894b82549f068ff0241665
- SHA512 50ba8d233a01c938692681c2790073d6847fcc27eed6eaf34f99d506f2477f9813d39c3f1e87869a561a17a26ec2f02e034d0eb83aaa4a8f841216591adeff1e
- SSDEEP 192:3OLSVtgqBE3HqcoxwtXc1v9B101sa/9ryXgTAi:eLyI3lOwZay9rtA
- TLSH T1D7622A49FBA44CE7E4648175C8632E6AD272F5345772A3CF4370821A1EB27D23F26E49
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target IcarusMacroMaker/_internal/PIL/_webp.cp314-win_amd64.pyd
- Size 400KB
- SHA256 7ccebe450b35317ba62e9427e57475eb51e4c49b273333538411bee7622c53d3
- MD5 28d0c0d9eaa192409a3fd9632a04e371
- SHA1 3dce8423e05a8313c39f7b95ad846f0c39d71d81
- SHA512 37184d0b56bc52a761fb4273e904d32b072150198f044a97220aa7ca314dc989e90425920dc06a91e237f9f6a55a09e97ab6e6dfdfed514ff6003dbd17677aeb
- SSDEEP 6144:e7rG4NVZsdVKn2jzQjtxBj1wnL/lCJDpm9C6DgICr6pdkJW0B/p9:srgXaizQjncNC7mUlIa6p
- TLSH T1C6946B46E9A625E8C5AFD078CAEE555AF6A43C1C034096EB47E0FE253E33BD0563B305
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target IcarusMacroMaker/_internal/VCRUNTIME140.dll
- Size 117KB
- SHA256 052ad6a20d375957e82aa6a3c441ea548d89be0981516ca7eb306e063d5027f4
- MD5 32da96115c9d783a0769312c0482a62d
- SHA1 2ea840a5faa87a2fe8d7e5cb4367f2418077d66b
- SHA512 616c78b4a24761d4640ae2377b873f7779322ef7bc26f8de7da0d880b227c577ed6f5ed794fc733468477b2fcdb7916def250e5dc63e79257616f99768419087
- SSDEEP 1536:Z9TXF5YXWbj8qr51XlN+dULTCe1IGhKWyxLiyaXYaNxoecbdhUoaLjTz164zEd:ZEnsvReGsWyxLizXFkecbd1aPTzW
- TLSH T10DC38C8572A002FBD16AC274C1A36A17FB75B94487B0A7CF03B58A650F53BE09E3D356
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target IcarusMacroMaker/_internal/VCRUNTIME140_1.dll
- Size 48KB
- SHA256 6a99bc0128e0c7d6cbbf615fcc26909565e17d4ca3451b97f8987f9c6acbc6c8
- MD5 c0c0b4c611561f94798b62eb43097722
- SHA1 523f515eed3af6d50e57a3eaeb906f4ccc1865fe
- SHA512 35db454dbcc7ed89842c0440b92ce0b0b0db41dbd5432a36a0b7e1eddf51704b1f0d6cff5e3a3b0c3ff5db3d8632fed000471180ad72e39d8dbe68a757ccdfb0
- SSDEEP 768:vzzO6ujT3MbR3v0Cz6Sz5q83ywug1HDV9zxfYbK9z:mq/oMx3hXHDnzxfYiz
- TLSH T1AE236BA453784486D4AB99B0C0DAEE577D7CFA964B10928F0BA0D15C1F637D0EB3D21B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target IcarusMacroMaker/_internal/_asyncio.pyd
- Size 76KB
- SHA256 f9dc3b563e0b313e3fa5364c2f14b1fe08d004d70126a6de5d78826db77c6318
- MD5 e9ff314adb895f5aeff2acc7de8ad7f4
- SHA1 4e33805d155897f85313253436e021b5c6e9ea04
- SHA512 56eea1ca70b712bd3bf4e6b6735fcbaced8591286a73fa9a18c122e5c4bacc23851fe3ea41093c4371cf1b604d085e32d019e30a66acc8ef4454c0a5976f3b01
- SSDEEP 1536:qo3BmEP+e2XbiHub0AVFDsdoISDngLycA89SfIk9LG:fSXOHuYAVFDsdoISDngt
- TLSH T134736D8792A44086EEF79134CE536FD3FBB0F1855905938F56A4C18E1F133A18BBA726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target IcarusMacroMaker/_internal/_bz2.pyd
- Size 85KB
- SHA256 082a761a280b08afecf6fb0509050ffbf7e87d1638ca49466b8b3eb4c85009b4
- MD5 b831ff0ab5f28a1f3bae6842896d45ff
- SHA1 e96c4dc15ef8f55fa47eef0f5e3d4a184eeef764
- SHA512 bdac51598e349a96aa399f8d6fc6ed46b8ff797bb70b372290a941581f4b63318df9578a557a297873b827b2de2eec8cc14e3c1241cf65f3e71f5653d7b034da
- SSDEEP 1536:jGNqB8z7DyEXkmNf0/ixk+x5dxNkP88l3ub8zMDIGQIS3VvcycA89JfIYhE:CNqB8zSEJUoZlTkUGK8zJGQIS3VLV
- TLSH T189838D86F36552B6F99FD1B846840793F734BB860750A3AFF148829A3F13BD06E5C225
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target IcarusMacroMaker/_internal/_ctypes.pyd
- Size 139KB
- SHA256 a11d680d89f054584e6a5b2a03103d8731def86e367aff2f70cce8c6367f9025
- MD5 208e7dd066f23080da03b4ebd20fbc43
- SHA1 8b56760b26be7c98a6752cacb3e78716972089ba
- SHA512 7841d4a3d6b04d00eff9e6a7ebdffea6d5a257bc095bfdfe33ffe78f2d0ce731af5021206b8e3b2e0da5ab0a27b0a65d149c346ea6c1d95fdd75087a411de40f
- SSDEEP 3072:7Eyf/PRau5nIktyc7utl1OUIVi0I1sDdMIBU8ISGPiT:oy35aynVp0qUITGs7BUS
- TLSH T146D37E0B736440E6DAA78178C6739E57EBB1F0511A1087CF4264C9AB2F633A26E3F715
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target IcarusMacroMaker/_internal/_decimal.pyd
- Size 283KB
- SHA256 dcc9555eaf911af7997777b94beea78f802a10f1e4f3c3d4df2f254d44c71797
- MD5 5bcfd857dc1088dce3cbd43bfebba363
- SHA1 3fb3d6dc3fb5f6d9621c4a3a5168ada5eae5990a
- SHA512 f7e455a732b6950606f6ceb17a75666e2c7fd76cf3b2f12728e5967e8980dbdd960e0301875e96e652411789385b199b75b4697c43b1b2ade1346e72a8018717
- SSDEEP 6144:9VyJ3YE9GFkzC6/gHdKHFXsGqqM43fIWeA4QuMkXWHJCb7W:9VyJoE9+kzx/gHYdT7/kmU7W
- TLSH T1D2547D56A3490CA4EF778434CA879A57F7B2B8414360D78F43A48A972FA3393277E744
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target IcarusMacroMaker/_internal/_elementtree.pyd
- Size 135KB
- SHA256 20086a4dccbf8bf3df3894665dd69d8c73cc6bdab5076ac4481c3983a02c605e
- MD5 a32c4f3818e9f7454a995798e742f351
- SHA1 29dc8c2c8e5eac358d2523126c001d073c2d7d2a
- SHA512 4c66ba52e02e4f5198c938497909dc91e179ddcb7ba04350d6cd144179bc12f8d7c37d6b97f3d5d6cca5795c194e745c08baeacfb3d8ca75f14764b9ebb08fc9
- SSDEEP 3072:T3qm6NMLHY3kSN5kQUCZ6OrKgcZU1tHQ/mSHBAZDF71bAISffjT:7qm23kSDCCZ6OwSQheDdV2
- TLSH T145D3494B7265C0ABE462403CE6978B83D7B6F9610E0083CF6284F69D5F673917E6A718
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target IcarusMacroMaker/_internal/_hashlib.pyd
- Size 67KB
- SHA256 0c11671a2c572b4c016be263789f238125419df5711e281acdce8da50d9badda
- MD5 4f7f664e8558a6cfc93ede2ae9d6974a
- SHA1 0b5ed2b9c68120d5912f12c1d6038afe517547a1
- SHA512 89cc41406f4b3da7ea46e15e12f86135ffe8c3fa2d906c8aa370402cfa4bd67fa00e2901e33e3e44daed075ddb9ac35c4dfd3181c44544d17c97522363227b85
- SSDEEP 1536:aL0SOWZsPqJWvnKt6RfoISDI1ycA89tfIYke:ULYyJWvnKt6NoISDIYM
- TLSH T1A2636B4AA6984062DA2382B4C8E34F43FA74F652271197DF6779C18D2F233C3537A756
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10