Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
143s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
-
submitted
08/08/2023, 18:28
General
-
Target
a134bc55becbc2d1452c4b972abe88b5_icedid_JC.exe
-
Size
261KB
-
MD5
a134bc55becbc2d1452c4b972abe88b5
-
SHA1
911948121c040864a936d59b74f466d03852bc62
-
SHA256
8df0787e1c2ec5994e62526a92b76d5c6fd976e2b7a7ac17031bf56c302a5677
-
SHA512
03e787d2902be08f5c7dd6ded14720545c613daa2e10ce6a1d2358a1aa68679cc882d0563a0b5c9dd25fcb77765c468827ffc4e3c470311fce590c2c66553789
-
SSDEEP
3072:lxUm75Fku3eKeJk21ZSJReOqlz+mErj+HyHnNVIPL/+ybbiGF+1u46Q7q303lU8O:fU8DkpP1oJ1qlzUWUNVIT/bbbIW09R
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Drops file in Program Files directory 2 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\a134bc55becbc2d1452c4b972abe88b5_icedid_JC.exe"C:\Users\Admin\AppData\Local\Temp\a134bc55becbc2d1452c4b972abe88b5_icedid_JC.exe"1⤵
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\Redist\license.exe"C:\Program Files\Redist\license.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
261KB
MD523061a2b243413f5dab70a8f31def814
SHA1d9d37b1a3f7e619f12bda5e7fdf535b36cb85f69
SHA256b87e3b7db8358ee09238f5a547413540405b13a6bd96c4c71851ff41884295ef
SHA5128ac1744d26144ff71276a4fcaf8e254ff706d3c1dbb86c67bf0bfa390cb014d4fada6c5168dbd85f1006621d735703176caaf684825340b2088573caff3a32d5
-
Filesize
261KB
MD523061a2b243413f5dab70a8f31def814
SHA1d9d37b1a3f7e619f12bda5e7fdf535b36cb85f69
SHA256b87e3b7db8358ee09238f5a547413540405b13a6bd96c4c71851ff41884295ef
SHA5128ac1744d26144ff71276a4fcaf8e254ff706d3c1dbb86c67bf0bfa390cb014d4fada6c5168dbd85f1006621d735703176caaf684825340b2088573caff3a32d5