General
- Target IceTea.rar
- Size 16.8MB
- Sample260831-q7bglswtex
- SHA256 a6032a41de3e1511f8d81823a9d334a73193e232465cd4bfda48d71d909fbd2d
Score
9/10
Malware Config
Targets
-
- Target IceTea/IceTea Patcher.exe
- Size 6.1MB
- SHA256 99fdc1897f730e76e460485b9c5d1c279461c14dc66e477a43f46389154194d7
Score9/10-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Themida packer
Detects Themida, an advanced Windows software protection system.
-
Checks whether UAC is enabled
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
- Target IceTea/IceTea.exe
- Size 7.0MB
- SHA256 b2310822e021e5cf579dd603809c1614fcca4630bc3f4130a60bb140474a64ae
Score7/10-
VMProtect packed file
Detects executables packed with VMProtect commercial packer.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
- Target IceTea/Kangaroo.dll
- Size 4.1MB
- SHA256 dab9e1152da6684b2b32726b9f46fc7b67b4a6c41ccce548f6e4e3e26857d80c
Score9/10-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Themida packer
Detects Themida, an advanced Windows software protection system.
-
Checks whether UAC is enabled
-
Suspicious use of NtSetInformationThreadHideFromDebugger