Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
-
submitted
07/01/2024, 12:08
General
-
Target
2024-01-06_3f8c0f61e126c2db665c5abccd76ec13_icedid.exe
-
Size
387KB
-
MD5
3f8c0f61e126c2db665c5abccd76ec13
-
SHA1
9688b3c6cdd3abf7f5e6ca76cf5650b2a9d1df37
-
SHA256
e448600a4d76efb30f63a04d402033b37fed5a256c082e196a7ba5521a425c9a
-
SHA512
91ab7bec6c133aad413263431de99f278c28df9372267f868fcf09944a47fc9f2f2cc096e876fa59dab37bd9729ec59783cb249d889140bf52f10f4feff3232a
-
SSDEEP
12288:eplrVbDdQaqdS/ofraFErH8uB2Wm0SXsNr5FU:KxRQ+Fucuvm0as
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 2 IoCs
-
Drops file in Program Files directory 1 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-01-06_3f8c0f61e126c2db665c5abccd76ec13_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-01-06_3f8c0f61e126c2db665c5abccd76ec13_icedid.exe"1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\Education\Debugging.exe"C:\Program Files\Education\Debugging.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
387KB
MD5fa45ef2ce1a84db0030067b87851c0b9
SHA11df01dc2ef447da3b3f749d1517bfcef07d22364
SHA256b75d227b368eb258f9d9607103c65923039b7095d3d96fc0fbbaeee3cc858a34
SHA5127442604073710b50f3cbe296392908543d6491bffb36f96b1170b22daf7e69a9410907c827b63798fdbe0b60448aff0bdded1cdac7c23ce803cb19b8faeb6baa