Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
117s -
max time network
129s -
platform
windows7_x64 -
resource
win7-20230831-en -
resource tags
-
submitted
12/10/2023, 01:39
General
-
Target
2023-08-26_3468145d2251ac2223c53013028a91de_icedid_JC.exe
-
Size
248KB
-
MD5
3468145d2251ac2223c53013028a91de
-
SHA1
e712f6e30aca429719bf8c41000b3edd09a4e669
-
SHA256
cce98af35b513aa9b81afd1a47d4a362045aa1cfd3d0b9214622f36b3230e5d8
-
SHA512
0a4336a96c3f6ab29e6deba9138f38edb583ce0cd6fea57f3779da1de9c74d4575b4f23787575a7fde9c5abe9efd8600dee2284e9e4949aa6f557bedc16b6f4b
-
SSDEEP
3072:lxUm75Fku3eKeO213SJReOqdmErj+HyHnNVIPL/+ybbiW1u46Q7qV3lU8xM:fU8Dk11CJ1qDWUNVIT/bblS9x
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 2 IoCs
-
Drops file in Program Files directory 2 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2023-08-26_3468145d2251ac2223c53013028a91de_icedid_JC.exe"C:\Users\Admin\AppData\Local\Temp\2023-08-26_3468145d2251ac2223c53013028a91de_icedid_JC.exe"1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\.exe"C:\Program Files\\.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
248KB
MD5ca0f165f33d59b6a7bbd1f55bdd35073
SHA1bf6d5c652488b6c846bf2c70de41fa76e3435d01
SHA25649df79607cd565f101db25f7f70dc9f031273e10e546984e9640df8fc3849025
SHA5123c7c9918fbcd10b6522893f216600bab97312efa7437c091230cc8c21bc15dcb81f0854cc415ef3faf5bbca294fecb969b50adf6d588b4db568526a1cc9731bc
-
Filesize
248KB
MD5ca0f165f33d59b6a7bbd1f55bdd35073
SHA1bf6d5c652488b6c846bf2c70de41fa76e3435d01
SHA25649df79607cd565f101db25f7f70dc9f031273e10e546984e9640df8fc3849025
SHA5123c7c9918fbcd10b6522893f216600bab97312efa7437c091230cc8c21bc15dcb81f0854cc415ef3faf5bbca294fecb969b50adf6d588b4db568526a1cc9731bc
-
Filesize
248KB
MD5ca0f165f33d59b6a7bbd1f55bdd35073
SHA1bf6d5c652488b6c846bf2c70de41fa76e3435d01
SHA25649df79607cd565f101db25f7f70dc9f031273e10e546984e9640df8fc3849025
SHA5123c7c9918fbcd10b6522893f216600bab97312efa7437c091230cc8c21bc15dcb81f0854cc415ef3faf5bbca294fecb969b50adf6d588b4db568526a1cc9731bc
-
Filesize
248KB
MD5ca0f165f33d59b6a7bbd1f55bdd35073
SHA1bf6d5c652488b6c846bf2c70de41fa76e3435d01
SHA25649df79607cd565f101db25f7f70dc9f031273e10e546984e9640df8fc3849025
SHA5123c7c9918fbcd10b6522893f216600bab97312efa7437c091230cc8c21bc15dcb81f0854cc415ef3faf5bbca294fecb969b50adf6d588b4db568526a1cc9731bc