Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    117s
  • max time network
    129s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    12/10/2023, 01:39

General

  • Target

    2023-08-26_3468145d2251ac2223c53013028a91de_icedid_JC.exe

  • Size

    248KB

  • MD5

    3468145d2251ac2223c53013028a91de

  • SHA1

    e712f6e30aca429719bf8c41000b3edd09a4e669

  • SHA256

    cce98af35b513aa9b81afd1a47d4a362045aa1cfd3d0b9214622f36b3230e5d8

  • SHA512

    0a4336a96c3f6ab29e6deba9138f38edb583ce0cd6fea57f3779da1de9c74d4575b4f23787575a7fde9c5abe9efd8600dee2284e9e4949aa6f557bedc16b6f4b

  • SSDEEP

    3072:lxUm75Fku3eKeO213SJReOqdmErj+HyHnNVIPL/+ybbiW1u46Q7qV3lU8xM:fU8Dk11CJ1qDWUNVIT/bblS9x

Score
7/10

Malware Config

Signatures

  • Executes dropped EXE 1 IoCs
  • Loads dropped DLL 2 IoCs
  • Drops file in Program Files directory 2 IoCs
  • Suspicious use of SetWindowsHookEx 8 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2023-08-26_3468145d2251ac2223c53013028a91de_icedid_JC.exe
    "C:\Users\Admin\AppData\Local\Temp\2023-08-26_3468145d2251ac2223c53013028a91de_icedid_JC.exe"
    1⤵
    • Loads dropped DLL
    • Drops file in Program Files directory
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2184
    • C:\Program Files\.exe
      "C:\Program Files\\.exe" "33201"
      2⤵
      • Executes dropped EXE
      • Suspicious use of SetWindowsHookEx
      PID:2220

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Program Files\.exe

    Filesize

    248KB

    MD5

    ca0f165f33d59b6a7bbd1f55bdd35073

    SHA1

    bf6d5c652488b6c846bf2c70de41fa76e3435d01

    SHA256

    49df79607cd565f101db25f7f70dc9f031273e10e546984e9640df8fc3849025

    SHA512

    3c7c9918fbcd10b6522893f216600bab97312efa7437c091230cc8c21bc15dcb81f0854cc415ef3faf5bbca294fecb969b50adf6d588b4db568526a1cc9731bc

  • C:\Program Files\.exe

    Filesize

    248KB

    MD5

    ca0f165f33d59b6a7bbd1f55bdd35073

    SHA1

    bf6d5c652488b6c846bf2c70de41fa76e3435d01

    SHA256

    49df79607cd565f101db25f7f70dc9f031273e10e546984e9640df8fc3849025

    SHA512

    3c7c9918fbcd10b6522893f216600bab97312efa7437c091230cc8c21bc15dcb81f0854cc415ef3faf5bbca294fecb969b50adf6d588b4db568526a1cc9731bc

  • \Program Files\.exe

    Filesize

    248KB

    MD5

    ca0f165f33d59b6a7bbd1f55bdd35073

    SHA1

    bf6d5c652488b6c846bf2c70de41fa76e3435d01

    SHA256

    49df79607cd565f101db25f7f70dc9f031273e10e546984e9640df8fc3849025

    SHA512

    3c7c9918fbcd10b6522893f216600bab97312efa7437c091230cc8c21bc15dcb81f0854cc415ef3faf5bbca294fecb969b50adf6d588b4db568526a1cc9731bc

  • \Program Files\.exe

    Filesize

    248KB

    MD5

    ca0f165f33d59b6a7bbd1f55bdd35073

    SHA1

    bf6d5c652488b6c846bf2c70de41fa76e3435d01

    SHA256

    49df79607cd565f101db25f7f70dc9f031273e10e546984e9640df8fc3849025

    SHA512

    3c7c9918fbcd10b6522893f216600bab97312efa7437c091230cc8c21bc15dcb81f0854cc415ef3faf5bbca294fecb969b50adf6d588b4db568526a1cc9731bc