Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
128s -
max time network
133s -
platform
windows10-2004_x64 -
resource
win10v2004-20230831-en -
resource tags
arch:x64arch:x86image:win10v2004-20230831-enlocale:en-usos:windows10-2004-x64system -
submitted
02/09/2023, 15:10
Static task
static1
Behavioral task
behavioral1
Sample
2023-08-22_1b63a45306fa25db0967964f595ea7fb_icedid_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
2023-08-22_1b63a45306fa25db0967964f595ea7fb_icedid_JC.exe
Resource
win10v2004-20230831-en
General
-
Target
2023-08-22_1b63a45306fa25db0967964f595ea7fb_icedid_JC.exe
-
Size
1020KB
-
MD5
1b63a45306fa25db0967964f595ea7fb
-
SHA1
d5172d6312578a7a5aa1d31bed2a9b8a142c163b
-
SHA256
ae8afc8fc42dfb699e4adb3d3bb78aefb1574a3ac5a961875b52e29ddeee5e80
-
SHA512
a3fb84fdd1e90345db2328b53b6ceba35b65e5f03f65994562c2fdcedf99f07a98db1fa5fca9dbaaed71303f3d74ca30764a4586d2737586f013615367ba1c85
-
SSDEEP
12288:kRTW8SO48sgHTFwZe6AW0jpEp4bsRpzaq5tWGEL93glP/JiXGWvLi+kCB7Kr3:kRT9SO48sgpw//0jCy4xQw/cGWg7r
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2584 1364 WerFault.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\2023-08-22_1b63a45306fa25db0967964f595ea7fb_icedid_JC.exe"C:\Users\Admin\AppData\Local\Temp\2023-08-22_1b63a45306fa25db0967964f595ea7fb_icedid_JC.exe"1⤵PID:1364
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1364 -s 5322⤵
- Program crash
PID:2584
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 1364 -ip 13641⤵PID:2288