Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
122s -
max time network
127s -
platform
windows7_x64 -
resource
win7-20230712-en -
resource tags
-
submitted
24/08/2023, 14:57
General
-
Target
8066c9c80f6f5ae6a0abe663086d0990_icedid_JC.exe
-
Size
7.3MB
-
MD5
8066c9c80f6f5ae6a0abe663086d0990
-
SHA1
e07aab5640d6b5d29f7356977d15be1e39230e96
-
SHA256
ad5f867c1d43558095089f0753223942eff2414433a661949ce83b8babf556df
-
SHA512
0a2589c8b90689b53c6cef588e0614983c497d3b27b42726ac37d70021a5e3e4f43435fc829e01b67a279ade2a4dd7ef60e65a8b0076b7e6fffb9b6cade91dd1
-
SSDEEP
196608:Oai48pLuFV9yITC+GQtDmpMEogwhaT4nKeoWd29Lxu60qBsSwwImUdTGButda:vi48pLuFV9yPpE0ZBWd29Lxu60BdTGBj
Score
1/10
Malware Config
Signatures
-
Modifies registry class 7 IoCs
-
Suspicious behavior: EnumeratesProcesses 5 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of SetWindowsHookEx 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\8066c9c80f6f5ae6a0abe663086d0990_icedid_JC.exe"C:\Users\Admin\AppData\Local\Temp\8066c9c80f6f5ae6a0abe663086d0990_icedid_JC.exe"1⤵
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx