Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
164s -
max time network
180s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
-
submitted
12/10/2023, 01:32
General
-
Target
2023-08-26_3cf38ce303732192fb8c32fc4b525e99_icedid_JC.exe
-
Size
1.6MB
-
MD5
3cf38ce303732192fb8c32fc4b525e99
-
SHA1
e5dc8f65fddc6dec675107e9ec738dc14b989a0f
-
SHA256
8277a8faed72ed5660f749a46e332f270c6452decffeaaeceabe00d4476802ba
-
SHA512
4de6a4001c4891f05c8586cc1234f28f543c2b9bf9a0278583f8a7e14b3ebd54ff628dcf36cb79657a96b666f229eeaeab427b27ae6d4c32154c6ebc4af7048c
-
SSDEEP
24576:hBLfKPCdnYDZuWeFfUVXMlLMKRfmO+vzk5NOjY9jkgcvXdxzwcd2KPJt:hYinoeFfyX+LZR+mOjY6gcvnLjht
Malware Config
Signatures
-
Executes dropped EXE 2 IoCs
-
Drops file in System32 directory 1 IoCs
-
Suspicious use of SetWindowsHookEx 6 IoCs
-
Suspicious use of WriteProcessMemory 6 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2023-08-26_3cf38ce303732192fb8c32fc4b525e99_icedid_JC.exe"C:\Users\Admin\AppData\Local\Temp\2023-08-26_3cf38ce303732192fb8c32fc4b525e99_icedid_JC.exe"1⤵
- Drops file in System32 directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\Meumeu Nevne.exe"C:\Windows\system32\\Meumeu Nevne.exe"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
-
C:\Windows\SysWOW64\Meumeu Nevne.exe"C:\Windows\system32\\Meumeu Nevne.exe"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
28KB
MD51259e3a3d449ceba068cb571209490cd
SHA13c31aa69b195a98bf10dce4f2f0e183a2c675c20
SHA2564592ae4068e49effb7200fe8488089f87b1ee1df871279c7fce0fd40f3c802f7
SHA5120475cc7affe74646b86cdd0848ffba4abce38327bbf6cf687112d412cf247e4904ac1c17aebc81a8ee305fb826fcf85d0bd24e86b0ee3ada95952b74551d72f9
-
Filesize
28KB
MD51259e3a3d449ceba068cb571209490cd
SHA13c31aa69b195a98bf10dce4f2f0e183a2c675c20
SHA2564592ae4068e49effb7200fe8488089f87b1ee1df871279c7fce0fd40f3c802f7
SHA5120475cc7affe74646b86cdd0848ffba4abce38327bbf6cf687112d412cf247e4904ac1c17aebc81a8ee305fb826fcf85d0bd24e86b0ee3ada95952b74551d72f9
-
Filesize
28KB
MD51259e3a3d449ceba068cb571209490cd
SHA13c31aa69b195a98bf10dce4f2f0e183a2c675c20
SHA2564592ae4068e49effb7200fe8488089f87b1ee1df871279c7fce0fd40f3c802f7
SHA5120475cc7affe74646b86cdd0848ffba4abce38327bbf6cf687112d412cf247e4904ac1c17aebc81a8ee305fb826fcf85d0bd24e86b0ee3ada95952b74551d72f9
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB