← Back to Pulse Feed
PULSE DETAIL
PULSE NAME
Operation Ice Breaker Targets The Gam(bl)ing Industry Right Before It's Biggest Gathering
WHITE CyberHunter_NL 2023-02-02 Modified: 2023-03-04
34
IOCs
MEDIUM VOLUME
Security Joes has identified a new threat actor targeting the gambling and gaming industry, and is trying to track its maker online, in order to block the campaign before the ICE London conference in 2023.
icebreakerhoudiniremote accessceograciaslnkvbsmsivisitorlnk fileice breakermsi packagepe fileice londoneladiojavascriptttpsiocsfebruaryassistanthelloinfotrojanfirstbypass
MITRE ATT&CK & Malware Families
ATT&CK TECHNIQUES
MALWARE FAMILIES
MSI VBS LNK Gracias CEO Remote Access Houdini IceBreaker
Indicators of Compromise (34)
All FileHash-MD5 FileHash-SHA1 FileHash-SHA256 domain
TYPEINDICATORDESCRIPTIONCREATED
FileHash-MD5 405ce3c84ebe44697c97e17cbc6441d8 MD5 of f97ee203a3dd08ac38d16295dbf9cb0c7476690ba03a05afefed34d7e8cfd44e 2023-02-02
FileHash-MD5 5ecdc9b194acd955e1635515ea426049 MD5 of 24df9651a38ab5328d59ab1c448a98afb3df8209b8877bbde63d49308e0d8c68 2023-02-02
FileHash-MD5 b8b8a4df0f3efef626e9269a0ff9c601 MD5 of 9ea31ef8ee5abaae8752f1db783431cbb9e691a457ae2cfe648210adeefb8eff 2023-02-02
FileHash-MD5 c97293c4d10331f9bc47b041c8ce4e0e MD5 of 978940d9785d3ade9f1c9b13ce35d67af2f47091740c2a4a5978e512543e6d76 2023-02-02
FileHash-SHA1 4fd5e3814e4ae525fa793df8967918d5d156e492 SHA1 of 24df9651a38ab5328d59ab1c448a98afb3df8209b8877bbde63d49308e0d8c68 2023-02-02
FileHash-SHA1 55d98677d9f8862732afdb7ccd93e40c58bc269c SHA1 of f97ee203a3dd08ac38d16295dbf9cb0c7476690ba03a05afefed34d7e8cfd44e 2023-02-02
FileHash-SHA1 5dadd4a4de48de8d938a2116bc1cef4261ccb1a6 SHA1 of 9ea31ef8ee5abaae8752f1db783431cbb9e691a457ae2cfe648210adeefb8eff 2023-02-02
FileHash-SHA1 84d614acc666abb6f95cfc3e432a2ee07faccb69 SHA1 of 978940d9785d3ade9f1c9b13ce35d67af2f47091740c2a4a5978e512543e6d76 2023-02-02
FileHash-SHA256 0f043b90f6fa68551221ec560068aac4abb90749ca42a63dd62664e483940ec3 — 2023-02-02
FileHash-SHA256 185182f369edcb96118a91dcad39eb5b63239112ed6963a8c274178bf1b55394 — 2023-02-02
FileHash-SHA256 24df9651a38ab5328d59ab1c448a98afb3df8209b8877bbde63d49308e0d8c68 — 2023-02-02
FileHash-SHA256 31d03d305354eb92f3ea0420b0f674bf6414422b24bb717ec28dfacdc2647a1d — 2023-02-02
FileHash-SHA256 3b86fb030c0d1b440307b8d2ca7bbe2590d58e5a28118985e9774990a1c74d21 — 2023-02-02
FileHash-SHA256 8727e8759232721413c038e45c5e05cbfe5194489c060875f273329db2aa7c08 — 2023-02-02
FileHash-SHA256 978940d9785d3ade9f1c9b13ce35d67af2f47091740c2a4a5978e512543e6d76 — 2023-02-02
FileHash-SHA256 9ea31ef8ee5abaae8752f1db783431cbb9e691a457ae2cfe648210adeefb8eff — 2023-02-02
FileHash-SHA256 a0a5a12f4781433ef3c0abd89186bd987f5d02c4e643803d92ff0413852d2486 — 2023-02-02
FileHash-SHA256 a2047deac9bb8af7107e35b6e3c8617bec01dd9121a76f4fbca1fa8c760ba40e — 2023-02-02
FileHash-SHA256 a6e97bdbd841c9ac8bdad6145cbe65f38a31d74eb9c00346bb5b3a005508b544 — 2023-02-02
FileHash-SHA256 a857fbb06f493cd63f2c8128038bf78d1467295e89be0c9848edd8a2dd8b44e8 — 2023-02-02
FileHash-SHA256 aa2521bf540a4070ebf4ad340051d4df1b9608eff22e0110a0a49e1289cdbf03 — 2023-02-02
FileHash-SHA256 b5ab83ceacfa4fba714d515248f166900f1b21e9a946e684be1e415439677309 — 2023-02-02
FileHash-SHA256 b8791cc1ec61e61b59cb8c251b49c644a597025fe1d1195e960212980822a93d — 2023-02-02
FileHash-SHA256 e3a7c1c8b8fe7a2fce89318015187adb672c31747d966218c962c91248179553 — 2023-02-02
FileHash-SHA256 f3645c8b04fe683ade9b5a46db8af6428c15e94730a25f05bf2378a4b28ad065 — 2023-02-02
FileHash-SHA256 f97ee203a3dd08ac38d16295dbf9cb0c7476690ba03a05afefed34d7e8cfd44e — 2023-02-02
FileHash-SHA256 fee0935cec808fe27112cf3c40e91d4702872f43064e9e9f71f9f1e6a8894eaf — 2023-02-02
domain ponzix.net — 2023-02-02
domain screenshot.icu — 2023-02-02
domain screenshot.net — 2023-02-02
domain screenshotcap.com — 2023-02-02
domain screenshotlite.com — 2023-02-02
domain xn--screnshot-iib.net — 2023-02-02
domain xn--screnshot-jib.net — 2023-02-02
References (1)
↗ https://www.securityjoes.com/post/operation-ice-breaker-targets-the-gam-bl-ing-industry-right-before-it-s-biggest-gathering