Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

1

awake32.dll

windows7-x64

3

awake32.dll

windows10-2004-x64

3

run.bat

windows7-x64

10

run.bat

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    awake32.tmp.zip

  • Size

    460KB

  • Sample

    230413-sl7zsscc44

  • MD5

    817b3f3b392d69cbcbb4fe4c94eefa1b

  • SHA1

    102368a24686bcfada5ef3e82bbb0eff7d84bfef

  • SHA256

    461dcc854a9827aadcb40f03b469d64a9b409eb2db913032cdd94a4bbd9c9d26

  • SHA512

    1fedb69f073d030e5e14b24ae0c52ccfd4b0aa2888931307fd1b356e74cdf007937cd43ec8e05d5666fba59c92801001b76b2bb1c702158037eb8fe5d8ae5664

  • SSDEEP

    12288:KZg8gHHoWqYq4J4nSVL29Mh6TSTYxtJ95OC:M4HoWzJ4n89kOIIC

Score
10/10
icedid2646410796bankercore_loadertrojan

Malware Config

Extracted

Family

icedid

Botnet

2646410796

C2

abigelofraj.com

yhorneedminf.com
Attributes
  • auth_var

    16

  • url_path

    /news/

Targets

    • Target

      awake32.tmp

    • Size

      235KB

    • MD5

      586069431de993344e781ece9607b24e

    • SHA1

      27fee626b02b60862e8a1d8ea93a681c92bd385a

    • SHA256

      02de2d5cafef10c90d0dca658524c9a36b09cb6bd9482373f0e644393faea5da

    • SHA512

      068b18bc7651ca23a87e585a5aa2029115fa3f9abc04d89c62cacb5f404866ac79d8823e53e1b5c56cd4dd88b03c0bca56a961a359fd872ab420223ed05f117a

    • SSDEEP

      6144:jtjTQl3Tn4zZZDRuptdPTcfm8cpOuJC8DRv/ni/s5Xg:jtjkWzZZQptdPTKccucD

    Score
    3/10
    behavioral1behavioral2

    • Target

      run.bat

    • Size

      52B

    • MD5

      0d05c5d81313dc589b57df12401e6688

    • SHA1

      44f72793d2490dc34e728450df342cbe4cbebd74

    • SHA256

      45ea9ebc1d93a95f935a90c0d113bd85fbe7db040aaa6692b22594a669c6b973

    • SHA512

      56e9e9e52f1db72f32bd5079500e3af3b04662c8a0e0b2e9d2b93023d260eeaab42512f7ecd76a4e8a9a318fd07471ccbbc241fb8777a98472da9ad238554a6c

    Score
    10/10
    icedid2646410796bankercore_loadertrojan

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

      trojanbankericedid
    behavioral3behavioral4

MITRE ATT&CK Matrix

Tasks