Overview
overview
7Static
static
3Crack/iceage2pc.exe
windows10-2004-x64
3Crack/iceage2pc.exe
windows11-ltsc_2024-x64
3DSETUP.dll
windows10-2004-x64
4DSETUP.dll
windows11-ltsc_2024-x64
4DXVersion.exe
windows10-2004-x64
3DXVersion.exe
windows11-ltsc_2024-x64
3IceAge2pc.exe
windows10-2004-x64
7IceAge2pc.exe
windows11-ltsc_2024-x64
7PCAUDIO.dll
windows10-2004-x64
3PCAUDIO.dll
windows11-ltsc_2024-x64
3Uninstall.bat
windows10-2004-x64
7Uninstall.bat
windows11-ltsc_2024-x64
7autorun.exe
windows10-2004-x64
3autorun.exe
windows11-ltsc_2024-x64
3binkw32.dll
windows10-2004-x64
3binkw32.dll
windows11-ltsc_2024-x64
3dsetup32.dll
windows10-2004-x64
4dsetup32.dll
windows11-ltsc_2024-x64
4mswebdvd.dll
windows10-2004-x64
3mswebdvd.dll
windows11-ltsc_2024-x64
3pid.dll
windows10-2004-x64
3pid.dll
windows11-ltsc_2024-x64
3pid.dll
windows10-2004-x64
3pid.dll
windows11-ltsc_2024-x64
3qasf.dll
windows10-2004-x64
3qasf.dll
windows11-ltsc_2024-x64
3qcap.dll
windows10-2004-x64
3qcap.dll
windows11-ltsc_2024-x64
3qdv.dll
windows10-2004-x64
3qdv.dll
windows11-ltsc_2024-x64
3qdvd.dll
windows10-2004-x64
3qdvd.dll
windows11-ltsc_2024-x64
3General
- Target Disk 1.iso
- Size 676.7MB
- Sample260710-yyb1saaz2t
- SHA256 5d52ca9ff228ab555f16e43ff2863cf0e9bbebd4cfdb670900ca0555bfdebe9c
- MD5 8a327f6dadd584d52dace550755bb5da
- SHA1 f036dd106d725f9ced54fb1cd024d6bb371b2a6e
- SHA512 39afde92ccea3d10911d36463fedbf90a9e11f22741d0a69bb9de7ed79402f73acfeac7854fce89e8d78a617df09f4a6e1cdb170d76e0167b57f6ed2f34706f5
- SSDEEP 12582912:O7oh40UWr7mEUilWeZH76p9v9uDw+QeDBj1c6tuJycWT11JNgj2NkNTIj:Ph40Um7o+ZHOzvEQsBO4qyb51JY2Nk
- TLSH T1FC7933979B0026E6C119077241D7ED3F5A346392CB433ED3F54C7A99BB72BE28036A46
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
Crack/iceage2pc.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
Crack/iceage2pc.exe
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral3
Sample
DSETUP.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
DSETUP.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
DXVersion.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
DXVersion.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
IceAge2pc.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
IceAge2pc.exe
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral9
Sample
PCAUDIO.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
PCAUDIO.dll
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral11
Sample
Uninstall.bat
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
Uninstall.bat
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
autorun.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
autorun.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral15
Sample
binkw32.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
binkw32.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral17
Sample
dsetup32.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
dsetup32.dll
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral19
Sample
mswebdvd.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
mswebdvd.dll
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral21
Sample
pid.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
pid.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral23
Sample
pid.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
pid.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral25
Sample
qasf.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
qasf.dll
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral27
Sample
qcap.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
qcap.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral29
Sample
qdv.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
qdv.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral31
Sample
qdvd.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
qdvd.dll
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target Crack/iceage2pc.exe
- Size 21.2MB
- SHA256 5a653c799ee3f8316492c140ece2ce53134d0437893dac31463c0fa4162c60f5
- MD5 4b5f5c86912f863d476ad97521a3fdc4
- SHA1 fdd1316775817825962f92726b2e69a89b18697c
- SHA512 e4c945c0ecf504a80513b6a19a091825ca19cb8b39e210801f9c4a286a538386a077dc38f1cac56cb6c1eb58167c7b2794c5ed5196e6c53c197e0ecc8aeaa9c9
- SSDEEP 393216:+0GkJa9zGrLf2LBo0eY5gMCA5c74vPJAKn:FGkJa9zWLf2LBYY5gMCA5cUT
- TLSH T1F8272A979B0423E6C25D07718097DD3E5A3463928B833EE3F94C6E96B772BE38036546
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target DSETUP.dll
- Size 61KB
- SHA256 ad672597c675a160dbc9b5321c4b1720f05e11af22fb8723ab93d0510bab4e01
- MD5 d3dcf192c9420cff748bf553b05edcd3
- SHA1 a0bd2b9f69597c9401891b48a87d3193f011ea57
- SHA512 92cbf24be9afa03762d730b5d8bef37619b63a6930cd1c762e2d12eefc6556a3c699a4e3eafeda56b30036d1decc3b393da8e1f114ce6076aeb00fe25aaffc6c
- SSDEEP 1536:0MYLA6vhzACiyKpkiKTySDU48Ecx1uVQdwKtvCAYkFCO3+LJDJ4r:0MIA6vhzACiyKpkiKThDUQculKDTCO3V
- TLSH T10D531B13BE618072DCD232FC154C666162AFA9B807B884E7970497E69DB13C9FA3D347
- MD5 SHA1 SHA512 SSDEEP TLSH
Score4/10 -
- Target DXVersion.exe
- Size 88KB
- SHA256 5bcce1d6e4b366b0550ef7417491c9a67424e660cd43937eb4e44326c4d34889
- MD5 27a9f1716c4a3cc4a059ecd6d1a28f5e
- SHA1 57a24dba365215c8b2fb446bbed166f9875eafc5
- SHA512 b9cd6533db28dff0c18f871f0a178c1fc0486f11967a125b435bbdb070254f72ef4b7c550862dd427a2e897792384670063eba59d2cfcf2691d78cd720e7d35b
- SSDEEP 768:s/3ujYDYHPNtUjf6XE1xbpLm8LiTjlEFylgl9ZU9QZU9:s/S/VtUT6XclyYB0lgnz
- TLSH T1A493C31266008465F75D0B714A06FAE05AAA9D3C15E4F14FFA7CBE3A6D321836E7324F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target IceAge2pc.exe
- Size 8.6MB
- SHA256 a967f83db38dddfcb393e9cc144a7651b7f2381134014a4547d4521ed136d9b5
- MD5 54e68f18d5ccc74bd173120c65488416
- SHA1 7575f493e425d1f6853477903806dc88b911023c
- SHA512 c08428e8fb65b64ebb75488ec305381e75cb19adbad713eab6a40840e0adb83c6958653902d77c26dd41e1c54f8c4f7c22926401b0a92a8f4c859cc7b1b92ced
- SSDEEP 98304:JybSqUmOOEbo7YWebG4Bl7vvtS1J0jlHxnETN+b/MxVpUm8n9kpWOvaZLi25cClx:8bSBOH2bG4Bl7NKCdqJ6CGkpWOyNi3g
- TLSH T19E96D06A6B487931C00112F363D7D66BA7F444919B471A89730EE3687BE2EE051337BE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Modifies system executable filetype association
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
-
- Target PCAUDIO.dll
- Size 180KB
- SHA256 b8c8ef8173bd8c29ab4e9aa0ee408eb316152150c97f771ef98753e049ec0f1b
- MD5 98e6ba5f3edcd9d30c4abfc6e6a0d8ba
- SHA1 e28b81dac29463769e6613bb5b2d24151203a5e4
- SHA512 31531208807bcce3e4adaad0478f3382239710e2e7b071b1b20e0b654e644c74107a4b81bf058e135cf9e3e71a2caceb1ac05b1bb64205ff92506848d77ad1c4
- SSDEEP 3072:WW04ChgqMQZKnChIMv8DUdLQbOHX4cdPmRxjpPiILzU1bDKAg0Fu5iCljE+sfW:W/gwQJMv8DkEK34cdPmXU1PKAOrE
- TLSH T1D504BE11B2F381B6D0FA467D290FBB596774220143FA89E38BA41D5A9E703D19A373C2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Uninstall.bat
- Size 26B
- SHA256 7d2187dc838be7d998982c0de4abdf25ef6ff13983b3eb60881ede15eab7dc2f
- MD5 d417837e00162acd2851fa0613104677
- SHA1 61a59499aba7933ee3cd4f1ba70cded80a88b890
- SHA512 2ea27d1b2fab65889b65f50c909d7cb9bf1849b6180b56af964baf28832f54b1b8f456129062929d6d291791ad52bdd632e7c2cc3cd888bbc31d1b128229d56c
- MD5 SHA1 SHA512
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
- Target autorun.exe
- Size 1.1MB
- SHA256 addc58d3363bcf8dd0d19855b68eb5f474826bf7f898ea198c390af3e6fd76fe
- MD5 533e0c75bb369ad03e797e3a5c6be92d
- SHA1 93ee7dd9c6bae06256084e0e90fa7d7e54cde7fd
- SHA512 eb9cacb9fe7c917c93e1cf30f60f8c95df37cfa01d436ec0080f2251c461fab2f03cf3104aa63d7fc4c08e6332b27424a52590db99747a52462c61412ccb85ca
- SSDEEP 24576:1Uc6t4BN291/UX91w49mF7+bXClixk5jFIFqdpF+FrFJFBFH49lq4jQmxMzNfBQO:1UcvN29lUPD6dnS4cBQw/l
- TLSH T1A8450253B7E8D8B9CA6323328FF6BB49B2BBF5200E32464375691B0F4A305C45636759
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target binkw32.dll
- Size 188KB
- SHA256 de7820f6b557c60f250146e863579c9d1a0673dc92e2110829031a5783f4245c
- MD5 0fbbdb77e01ef4092da44f201cae0521
- SHA1 70cd4cb2b4ea4cdf71f34c3f7fe0c2d2e676d9ba
- SHA512 9afeca0250ea314f556aa37c78be76aa8ad7ef757c48c683df4d06a81a5ca9646b8177099d76b20d6e0acc722bfe58c5659dd2c19281660d8b2e384f7fc964b8
- SSDEEP 3072:/ce8HbW3IGPwrpF5IcKNglPvmXUYRMvgfqKRY622y6rD8bjOLDNy/u9olsH7YWc+:CbW3IIe0l2lPvmXUYU7622y6rD8bjOLN
- TLSH T17A14AE82F4965DB0E8CB1EB6109B3B579A251F05C32941E3EB642F979B61DE10D3A3C3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target dsetup32.dll
- Size 2.1MB
- SHA256 79ba6d7ef7f8ffeb7cfec21b14003a121314b831e3522c24bb0a581406cc6c9a
- MD5 209201efab0b251eb90a18639b68c841
- SHA1 1a612dfc41961571b63a85e2531d72d003e6884d
- SHA512 41eb5629018ad1a3bc2fe8a1ca2f8f126422b740a91cd7fb532ee4bfd0c5cc6e143e6dc37e58f570e82ded251dbb712248f999e77dc24cab2b3c72af9dc2a043
- SSDEEP 49152:xfxIFFFFFFFFFFFFFFFFSQJJDQJJDQJJDQJJDQJJDQJJDQJJDQJJDQJJDQJJDQJ1:l
- TLSH T1DEA59F7D9AC501D0FA26ABB217713ED73A7CD14BF9268E2070B9518451B3BDCC26AF18
- MD5 SHA1 SHA512 SSDEEP TLSH
Score4/10 -
- Target mswebdvd.dll
- Size 316KB
- SHA256 523c4b8a925bb0ad76df192d69802744a32a5134a6233acce5be4853a3460f80
- MD5 0db04280a7bec2350dc6585f62ebb4db
- SHA1 e68dc06f852f7aff04b078f224ec2cbdba71bcd0
- SHA512 529d3efa1441d3ab3fc2b61a7b1ecd0fb68cc8b77072f5f203cf79ec92cab1c830dc8543e30654985e7ff8f564586fda6e7d5859ac5a0ba5eb7d0f6bf503245f
- SSDEEP 3072:nGbDgFOO2uR9E/eorkQXqrfNRcya7z5IDLRt9ny1cUPcUfX8z3F1iC6VIIY5C5w7:GIEO2uR9E/eorNX6FRczzuvRfyxzszy
- TLSH T17264C301B3E8C626F1F71B305EBAA69A5A77FD509E36821F2284131D1D71F84EA24737
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target pid.dll
- Size 31KB
- SHA256 3b3414e5dab4a23dd5306804f2b20aae2fa44cd353e7c35df3c8922c19b094da
- MD5 c5439671424e05065262a89b2d7262c8
- SHA1 07d35edea49fc6bcf45f5ed7af5d608f1113d405
- SHA512 b051a360a4bae7d6df6503375a7ec854c38ec7dd7fa3e6e4344457d3450070a4870d86135783ce6fcb801494b6b760cf81284ea6f57db670ae3c7f15c1440756
- SSDEEP 384:9wATgCadCCf325/I4SO0Zy4qEg7pf4gDE3ogcxo2hTXRgZm6MqtqtsWuhGWqD/:tTgChC/2VSOUmf76gDQQto5MRtQ
- TLSH T158E23B20B7F989B7F2F6427019C26B6177BC59180278AD8F53E01D8B3CF0D95A62A753
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target pid.xpg
- Size 31KB
- SHA256 77ab8f0f35c1979f0682edd320c8a89979d5312596afd4e1b9c61b92d172a9ed
- MD5 23f608f9e03f9044d8ae1e07c360cf35
- SHA1 9d61f30741c95af392a22a4cfcf161bc2fb7533e
- SHA512 715704ee6c51566611544e9e0660e123f8dc251c6a14cb66c9becbf9c8df11f77b467fd5b471a708d9762b8b68e5bd841bbb96dd0570bbae7c95007575b47131
- SSDEEP 384:KxbTgqDq1QVb520nP0GFu1AqDfxOtpW0JMlmg8C2xdrGBD6nITqtqtCUbWu5GWQD:8TgqEQVbc0cGlTjJMlQKBDnTRtCU1
- TLSH T113E24A50F7C549BAE1F636345AD2AB6137BDAE180234E88F53D01D1A3CB0E51963E7A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target qasf.dll
- Size 169KB
- SHA256 4cc448041d271b2a6f81bbcfe4a4fc6d806bb7116c592bc41293dfd20093b072
- MD5 d00019595622e5bd09692e78ec659b04
- SHA1 20161fcfa6b19a2a4221a28a18aa435b0c89fe59
- SHA512 c9308d94cc993ff26ac7c4f57b46be24a1feb2dc6f83477f742910b195c2598fe1f94481ee4c02ea224e6dcb4e4de90529caaddde4ea69da7298f0de277d6170
- SSDEEP 3072:qef8nrZvp82W6CDaU42u6KrEZdL2Z0VoYhto0HV3eKVp2RFJxen8ef8IOaQyD5Zq:qTvp8Lu6KrEZdL2KWqtrV34nJxO8
- TLSH T197046C02B3F67075E1E3523ADB7AB37BB379BB145A21D65A06144F1E2E31680E92C317
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target qcap.dll
- Size 251KB
- SHA256 300cf546942d1677931a9a8870f5db4908d1c7c047fda678ce5d2e9bcf341c5d
- MD5 ba463212059dd46754ddbb652deaa1cc
- SHA1 5775c1f78e598304dc06f71b15713d65f3f880ef
- SHA512 fd685dad38883940d9be616c55acaece75a4c3719e2dad20804469dcd7365e39e9c6cfe7807e8fbc6c1142a4c2e2ba8370b3c126954fec41573dc4358d7b6f38
- SSDEEP 6144:rBHGyV1sKLcgkFdzHukl2LT98EUFXW1mV6/gQ:VHGU1nLcgkaX98EMW
- TLSH T172443A01A3F9C03AF1F34B755EF977A65A7AFD045A28C80F9B82278D1971A00DA25737
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target qdv.dll
- Size 309KB
- SHA256 da767a32227314a539a957d697495e60515f8eb16c5bd53bce72dab59c6f0c3f
- MD5 65d8b351948696c8c18c5a398cfd2eab
- SHA1 9bfe07a2f9a93af9b56803938a0cb70eafdce98d
- SHA512 96ab07f756a40924a4a580cfc0432c4619b70705d9f187c5ac28c24f7ed0efe1317a80a450721a6e9468f3f75e7d47bd33e017069754dc7420f1b8eae9495140
- SSDEEP 6144:b1q4gnw8OsYipfwa/zQZSVZNpVKo7VZN6VZNoSlt+aKw4dJLhrvPhPFqBFv5ZF:b1qnwi1vw2JFTED
- TLSH T1AC646B626355D627E0E150BA95FF227D29BDFF609315A4C7878036B978B02C18E3239F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target qdvd.dll
- Size 459KB
- SHA256 be2e70e8dc5f1d6e0180325a9396c53046110bf7660710e09986e95606f88429
- MD5 ec42b5174b34a6de23f64af2636e7d42
- SHA1 a87046291a5a04b31ce8ec2a0fa2a5065e826461
- SHA512 85fe55b190d6b81dc211808cba56752c41dec45ae35c58064d52aab98864c453fcab8647271df7c5d0ec4e7ae2f269b053accfcd2abb7a5b29997a5263f10c6a
- SSDEEP 6144:bqf23uUQb/fnU7n4vEK5JSzIsV9NFWt6gvmf9FEq7ONvXqOqjK+rtdBDOrJ//Uy:IoQbu48gJdt6hf9FEMONipDrtdBirJv
- TLSH T184A4182162E5D236D8E332F4597C777162AFF4A0133445CB57081BE9EAA17C09E393AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10