General
- Target IceFree.exe
- Size 719KB
- Sample260719-s1bvxags71
- SHA256 d89f6a4fb31b4dd936865c5d36f5dbc43aa6335edfa92027795c9340c59b9392
- MD5 1d4060f64302e93399423aedd24d2401
- SHA1 39baab6dec201e5668bce1f061dee74453a886cc
- SHA512 997a6bbba0666f4a1e9cba27f2778060b5b6ce9ecf606c088c4b291427c607c11e75fbcc32b17beb2138225caa84e0d1747aca0bc48ccaca478a6109a6ac7ce4
- SSDEEP 12288:I26XXpAnCq4ESQKzwhAhg12q5cY/+1rocKi+njWZHHbScfz:IzvQSZiXb/+1Wi+n4H7Sc7
- TLSH T154F49E46F1E952E8D0BBD1789696A51FFB713854073086CF63E045A81FB37E06BBA702
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
IceFree.exe
Resource
win11-20260513-en
15 signatures
900 seconds
Malware Config
Targets
-
- Target IceFree.exe
- Size 719KB
- SHA256 d89f6a4fb31b4dd936865c5d36f5dbc43aa6335edfa92027795c9340c59b9392
- MD5 1d4060f64302e93399423aedd24d2401
- SHA1 39baab6dec201e5668bce1f061dee74453a886cc
- SHA512 997a6bbba0666f4a1e9cba27f2778060b5b6ce9ecf606c088c4b291427c607c11e75fbcc32b17beb2138225caa84e0d1747aca0bc48ccaca478a6109a6ac7ce4
- SSDEEP 12288:I26XXpAnCq4ESQKzwhAhg12q5cY/+1rocKi+njWZHHbScfz:IzvQSZiXb/+1Wi+n4H7Sc7
- TLSH T154F49E46F1E952E8D0BBD1789696A51FFB713854073086CF63E045A81FB37E06BBA702
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Sets service image path in registry
This determines the executable launched when a service starts. It can be used to establish persistence.
-
Executes dropped EXE
-
Indicator Removal: File Deletion
Adversaries may delete files left behind by the actions of their intrusion activity.
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1