Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
122s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
-
submitted
02/08/2023, 17:50
General
-
Target
3dc8304073dd7c5b416099fbc30b9cc0_icedid_JC.exe
-
Size
369KB
-
MD5
3dc8304073dd7c5b416099fbc30b9cc0
-
SHA1
ac6c770e3531bcf55b3ec366406bed523db73991
-
SHA256
1ee289a366f016a4fec76df7014a7392daf2e10d7e30b8b2c0a779048a9455d4
-
SHA512
b924ffab5ed4e921cb7a81f5e29fc789c08897cc0af43b0ee31d0d6879c936685bdce7dc156a68e614cde31b77c426bb08640ff413b12db79e96c47d033e1094
-
SSDEEP
6144:+plrlbbDdQaqd2X/96fr3KFEUGjr8uB2WgcA0cpXEVNrvGZ4FUqm6:+plrVbDdQaqdS/ofraFErH8uB2Wm0SXj
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Drops file in Program Files directory 1 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\3dc8304073dd7c5b416099fbc30b9cc0_icedid_JC.exe"C:\Users\Admin\AppData\Local\Temp\3dc8304073dd7c5b416099fbc30b9cc0_icedid_JC.exe"1⤵
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\proper\structure.exe"C:\Program Files\proper\structure.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
370KB
MD55a7f4d61732c3de808551057dc8e184a
SHA1a8bdb41de4ce7b3ccc0418781e809c9460d26953
SHA2566858407aa87c035db82b317ae93fa7236513c7265f31de34730c7838a2e0e216
SHA51236e0a851f1217bbe61c8e26b4728403204d4ec97c8de8e964776358576d2839e83a825fff2d1542af42227c4314e7e2eded28c23f07316b8bef59b4ac08442fa
-
Filesize
370KB
MD55a7f4d61732c3de808551057dc8e184a
SHA1a8bdb41de4ce7b3ccc0418781e809c9460d26953
SHA2566858407aa87c035db82b317ae93fa7236513c7265f31de34730c7838a2e0e216
SHA51236e0a851f1217bbe61c8e26b4728403204d4ec97c8de8e964776358576d2839e83a825fff2d1542af42227c4314e7e2eded28c23f07316b8bef59b4ac08442fa