Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
240s -
max time network
285s -
platform
windows7_x64 -
resource
win7-20230831-en -
resource tags
-
submitted
14/10/2023, 03:30
General
-
Target
2023-08-25_4b987782d2dcabb1970940936a91c7b3_icedid_JC.exe
-
Size
250KB
-
MD5
4b987782d2dcabb1970940936a91c7b3
-
SHA1
e81d60c3cb06987c0a6c26f2ef73122b0d44030f
-
SHA256
387dbe5092f60d3b742fab4d426a28d0167c1f4b172ef774cbd7f3c3794b825f
-
SHA512
265c723e65cb9c085141277802644b59b13a37ddf69904440c98084e9b772c417446d5ff0280a16bba46412914eb9b5026dbadd788ee357e17a548bfa03d98d4
-
SSDEEP
3072:lxUm75Fku3eKeO213SJReOqdmErj+HyHnNVIPL/+ybbiW1u46Q7qV3lU8xM:fU8Dk11CJ1qDWUNVIT/bblS9x
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 2 IoCs
-
Drops file in Program Files directory 2 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2023-08-25_4b987782d2dcabb1970940936a91c7b3_icedid_JC.exe"C:\Users\Admin\AppData\Local\Temp\2023-08-25_4b987782d2dcabb1970940936a91c7b3_icedid_JC.exe"1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\.exe"C:\Program Files\\.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
250KB
MD562876d82de32a92545da792b00f9e125
SHA19a22aa0106c2792b2c956a5cfabdc5569c9c2f94
SHA25661d84f267cfb1e8316f6d03e4eb4c1b228eebd255d065673672c4a78edec7971
SHA5122c062aa001dd379d4126671339e9834fcfea839bf5bdd10cc775a8046d13846436b439be2e83a044093e72ed059a06697d66647ee5a41c780ff724921d5284a8
-
Filesize
250KB
MD562876d82de32a92545da792b00f9e125
SHA19a22aa0106c2792b2c956a5cfabdc5569c9c2f94
SHA25661d84f267cfb1e8316f6d03e4eb4c1b228eebd255d065673672c4a78edec7971
SHA5122c062aa001dd379d4126671339e9834fcfea839bf5bdd10cc775a8046d13846436b439be2e83a044093e72ed059a06697d66647ee5a41c780ff724921d5284a8
-
Filesize
250KB
MD562876d82de32a92545da792b00f9e125
SHA19a22aa0106c2792b2c956a5cfabdc5569c9c2f94
SHA25661d84f267cfb1e8316f6d03e4eb4c1b228eebd255d065673672c4a78edec7971
SHA5122c062aa001dd379d4126671339e9834fcfea839bf5bdd10cc775a8046d13846436b439be2e83a044093e72ed059a06697d66647ee5a41c780ff724921d5284a8
-
Filesize
250KB
MD562876d82de32a92545da792b00f9e125
SHA19a22aa0106c2792b2c956a5cfabdc5569c9c2f94
SHA25661d84f267cfb1e8316f6d03e4eb4c1b228eebd255d065673672c4a78edec7971
SHA5122c062aa001dd379d4126671339e9834fcfea839bf5bdd10cc775a8046d13846436b439be2e83a044093e72ed059a06697d66647ee5a41c780ff724921d5284a8