Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
117s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20230712-en -
resource tags
-
submitted
02/08/2023, 17:50
General
-
Target
3dc8304073dd7c5b416099fbc30b9cc0_icedid_JC.exe
-
Size
369KB
-
MD5
3dc8304073dd7c5b416099fbc30b9cc0
-
SHA1
ac6c770e3531bcf55b3ec366406bed523db73991
-
SHA256
1ee289a366f016a4fec76df7014a7392daf2e10d7e30b8b2c0a779048a9455d4
-
SHA512
b924ffab5ed4e921cb7a81f5e29fc789c08897cc0af43b0ee31d0d6879c936685bdce7dc156a68e614cde31b77c426bb08640ff413b12db79e96c47d033e1094
-
SSDEEP
6144:+plrlbbDdQaqd2X/96fr3KFEUGjr8uB2WgcA0cpXEVNrvGZ4FUqm6:+plrVbDdQaqdS/ofraFErH8uB2Wm0SXj
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 2 IoCs
-
Drops file in Program Files directory 1 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\3dc8304073dd7c5b416099fbc30b9cc0_icedid_JC.exe"C:\Users\Admin\AppData\Local\Temp\3dc8304073dd7c5b416099fbc30b9cc0_icedid_JC.exe"1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\Dsetup2\proper.exe"C:\Program Files\Dsetup2\proper.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
370KB
MD54dc30d0732eb33500a90431de8dfa1b2
SHA110403633efee9e8a7c47a686c6fb3794712d63d9
SHA256cc182549bb3ffe8450cb8daf855f0aab4abe53ce84d017441e6dcc4aa4a17075
SHA512ad717a335b23e53891062748d4bff5690f183d4b6809f90071e563f779c4d7856baa9de6979af129adfe98e983484b85a9d0f0f8c6ea8729cf1c2a9efe297863
-
Filesize
370KB
MD54dc30d0732eb33500a90431de8dfa1b2
SHA110403633efee9e8a7c47a686c6fb3794712d63d9
SHA256cc182549bb3ffe8450cb8daf855f0aab4abe53ce84d017441e6dcc4aa4a17075
SHA512ad717a335b23e53891062748d4bff5690f183d4b6809f90071e563f779c4d7856baa9de6979af129adfe98e983484b85a9d0f0f8c6ea8729cf1c2a9efe297863
-
Filesize
370KB
MD54dc30d0732eb33500a90431de8dfa1b2
SHA110403633efee9e8a7c47a686c6fb3794712d63d9
SHA256cc182549bb3ffe8450cb8daf855f0aab4abe53ce84d017441e6dcc4aa4a17075
SHA512ad717a335b23e53891062748d4bff5690f183d4b6809f90071e563f779c4d7856baa9de6979af129adfe98e983484b85a9d0f0f8c6ea8729cf1c2a9efe297863
-
Filesize
370KB
MD54dc30d0732eb33500a90431de8dfa1b2
SHA110403633efee9e8a7c47a686c6fb3794712d63d9
SHA256cc182549bb3ffe8450cb8daf855f0aab4abe53ce84d017441e6dcc4aa4a17075
SHA512ad717a335b23e53891062748d4bff5690f183d4b6809f90071e563f779c4d7856baa9de6979af129adfe98e983484b85a9d0f0f8c6ea8729cf1c2a9efe297863