Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
146s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
-
submitted
07/01/2024, 12:08
General
-
Target
2024-01-06_3f8c0f61e126c2db665c5abccd76ec13_icedid.exe
-
Size
387KB
-
MD5
3f8c0f61e126c2db665c5abccd76ec13
-
SHA1
9688b3c6cdd3abf7f5e6ca76cf5650b2a9d1df37
-
SHA256
e448600a4d76efb30f63a04d402033b37fed5a256c082e196a7ba5521a425c9a
-
SHA512
91ab7bec6c133aad413263431de99f278c28df9372267f868fcf09944a47fc9f2f2cc096e876fa59dab37bd9729ec59783cb249d889140bf52f10f4feff3232a
-
SSDEEP
12288:eplrVbDdQaqdS/ofraFErH8uB2Wm0SXsNr5FU:KxRQ+Fucuvm0as
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Drops file in Program Files directory 1 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-01-06_3f8c0f61e126c2db665c5abccd76ec13_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-01-06_3f8c0f61e126c2db665c5abccd76ec13_icedid.exe"1⤵
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\games\that.exe"C:\Program Files\games\that.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
387KB
MD5a4b4c706620a67952d3d964709e6132e
SHA1929ad4cd4743b17eefaf0bd15f4ce15d83bc4e04
SHA2569917f5f65dc8c1a82ab65544ae19fa59f9ae3e826e54d2553c1356b600558d82
SHA5122cd825fc3d079e0f415c343bc769ae28a904ddf5e08d88e1f1025f30ea156efe924090f2ffae190b1319f8562c5ade002726877db7c22731441e059748df1498
-
Filesize
382KB
MD560344f88ac500e5a960e9794568ba2d9
SHA1c1adfc43cc13226ca1f15b7822306dac865d5521
SHA256942b4d38e4af17720fdecea1417d2864e9f31c2e50ff4897365f1e6d831d8a29
SHA512dde2ae6bdafbac30278226058dbe3fc598f61d599d6e036fe3899a9f34432c8834f22d6f809028bd2c27cb208db0247f3ca3e2f37d6514529e57721a0cc568cf