General
- Target IceFree.exe
- Size 1.4MB
- Sample260803-r63edatse1
- SHA256 92ebac138d93537275e74d4906bf04473e1e8067846100d3cee1adcdb379fb59
- MD5 f5cf88441aac3909b86de13f3fa8c537
- SHA1 a5b9711909c8ff42598395287d0d0d26e8075e18
- SHA512 020c6f32d9058805faeb2afbfea036f760729f5beea52b7202c729252f83132634e4a54949c83a354411907184829209000712ab1d8028fd46e2800bdd6ca0e2
- SSDEEP 24576:WjGqeJNiLit1+diUnDO4UUUZyFlXgWgYDv:WeV+MUnCjUUZyFgWgYr
- TLSH T192659F1DB19B0AA9D9A2D87D827AA217F321B40D1FB049E373D404E83B67ADC5775E03
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
IceFree.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
IceFree.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target IceFree.exe
- Size 1.4MB
- SHA256 92ebac138d93537275e74d4906bf04473e1e8067846100d3cee1adcdb379fb59
- MD5 f5cf88441aac3909b86de13f3fa8c537
- SHA1 a5b9711909c8ff42598395287d0d0d26e8075e18
- SHA512 020c6f32d9058805faeb2afbfea036f760729f5beea52b7202c729252f83132634e4a54949c83a354411907184829209000712ab1d8028fd46e2800bdd6ca0e2
- SSDEEP 24576:WjGqeJNiLit1+diUnDO4UUUZyFlXgWgYDv:WeV+MUnCjUUZyFgWgYr
- TLSH T192659F1DB19B0AA9D9A2D87D827AA217F321B40D1FB049E373D404E83B67ADC5775E03
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Indicator Removal: File Deletion
Adversaries may delete files left behind by the actions of their intrusion activity.
-
Drops file in System32 directory