Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2023-08-26_1429e5e35f128ac364ca359f60fac8c2_icedid_JC.exe
-
Size
3.6MB
-
Sample
230917-m76e7scd59
-
MD5
1429e5e35f128ac364ca359f60fac8c2
-
SHA1
4aedea962689a4b1304495ba7158711748ebd314
-
SHA256
dc71bbc4861b213e7b8d37b1fd03cf86b59f5a1c9d9d94f4a2e04741e5b4ea42
-
SHA512
7f5594ba6fa90dad8b41eb28b726e7c246929b2baa9c7cbeedc0b313429adad2487b8c62f5056c2b9c8a70934783296577421702c6a194350451745522c74c76
-
SSDEEP
98304:R8/II/rw/MDxhs6t/lgndLtqISJ0e/Eh6hxvWbrtUTrUHOf:R+LemJ0e/EEx+NcIOf
Static task
static1
Behavioral task
behavioral1
Sample
2023-08-26_1429e5e35f128ac364ca359f60fac8c2_icedid_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
2023-08-26_1429e5e35f128ac364ca359f60fac8c2_icedid_JC.exe
Resource
win10v2004-20230915-en
Malware Config
Targets
-
-
Target
2023-08-26_1429e5e35f128ac364ca359f60fac8c2_icedid_JC.exe
-
Size
3.6MB
-
MD5
1429e5e35f128ac364ca359f60fac8c2
-
SHA1
4aedea962689a4b1304495ba7158711748ebd314
-
SHA256
dc71bbc4861b213e7b8d37b1fd03cf86b59f5a1c9d9d94f4a2e04741e5b4ea42
-
SHA512
7f5594ba6fa90dad8b41eb28b726e7c246929b2baa9c7cbeedc0b313429adad2487b8c62f5056c2b9c8a70934783296577421702c6a194350451745522c74c76
-
SSDEEP
98304:R8/II/rw/MDxhs6t/lgndLtqISJ0e/Eh6hxvWbrtUTrUHOf:R+LemJ0e/EEx+NcIOf
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Drops file in System32 directory
-