Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
91s -
max time network
92s -
platform
windows7_x64 -
resource
win7-20230621-en -
resource tags
-
submitted
02/07/2023, 19:08
General
-
Target
Malicious_0fed2eee48f0c519ebeae287b1fb667c2ea217def78caa09c75669e003af8a35.dll
-
Size
64KB
-
MD5
1e896978b012441fa0ab26c19ac04075
-
SHA1
4b9bc68dc255a4ab0ef1ef3f347b12b28c246024
-
SHA256
0fed2eee48f0c519ebeae287b1fb667c2ea217def78caa09c75669e003af8a35
-
SHA512
75fc06813722ef604e6ac05b0c63e581c46dc7f9aaa804e2ba6860e5b1efd03f52237871d2295aa72318f0a72d62c130d7edfbfac026ebd0359b29af32aa3d2a
-
SSDEEP
1536:roBHSfku/TguqNKM6C6E+YUv3EXmYOiKsU:roBS8Q0R68Xys
Score
10/10
Malware Config
Extracted
Family
icedid
Campaign
2046050
C2
calldivorce.fun
Signatures
-
IcedID, BokBot
IcedID is a banking trojan capable of stealing credentials.
-
IcedID First Stage Loader 2 IoCs
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Windows\system32\regsvr32.exeregsvr32 /s C:\Users\Admin\AppData\Local\Temp\Malicious_0fed2eee48f0c519ebeae287b1fb667c2ea217def78caa09c75669e003af8a35.dll1⤵
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
28KB
-
Filesize
28KB