Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    c5dda6f2efc65309dad5cbcb1030807c.dll.exe

  • Size

    209KB

  • Sample

    221029-q2zbgsaden

  • MD5

    c5dda6f2efc65309dad5cbcb1030807c

  • SHA1

    af0784fe2214b9f562c756aa1915b69aae2398fe

  • SHA256

    6a03b75cf4eef6aa088c98731f1c57e62b2fe94854b002a3f192789b06afafbb

  • SHA512

    3955ae087ec945180c9e9119a3ce00ec714af1fa0bb2d89edbd8eeaa81751472f46ba94f0265193f9f11fc87abee3d9ab0dec7d7cf037cfea09ff3c277c863e7

  • SSDEEP

    3072:QzR1y+SoWcx10Up71qDDxIEnbXhSzis+3N07:QCcx1j72DxIWf

Malware Config

Extracted

Family

icedid

Campaign

3447045697

Extracted

Family

icedid

Targets

    • Target

      c5dda6f2efc65309dad5cbcb1030807c.dll.exe

    • Size

      209KB

    • MD5

      c5dda6f2efc65309dad5cbcb1030807c

    • SHA1

      af0784fe2214b9f562c756aa1915b69aae2398fe

    • SHA256

      6a03b75cf4eef6aa088c98731f1c57e62b2fe94854b002a3f192789b06afafbb

    • SHA512

      3955ae087ec945180c9e9119a3ce00ec714af1fa0bb2d89edbd8eeaa81751472f46ba94f0265193f9f11fc87abee3d9ab0dec7d7cf037cfea09ff3c277c863e7

    • SSDEEP

      3072:QzR1y+SoWcx10Up71qDDxIEnbXhSzis+3N07:QCcx1j72DxIWf

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • Blocklisted process makes network request

MITRE ATT&CK Matrix

Tasks