Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
122s -
max time network
128s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
10/01/2024, 06:02
General
-
Target
2024-01-09_d58be91bbde28ba7c6550decb5e8ee79_icedid.exe
-
Size
422KB
-
MD5
d58be91bbde28ba7c6550decb5e8ee79
-
SHA1
3f3712632018f46cd9e466fc396a492da287273a
-
SHA256
58cda29fe0675064e582f6788fcd93046cb3f2a560aeaf970f9ba49a0893273e
-
SHA512
7b4778f4a96791a16c3ec016fdf66979de24031dc18b07f59792e527481161ec70e64632b2850c6f5a2c98c1d8877043a57b43542e6f56304e21f8e5abce4671
-
SSDEEP
12288:yplrVbDdQaqdS/ofraFErH8uB2Wm0SXsNr5FU:+xRQ+Fucuvm0as
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 2 IoCs
-
Drops file in Program Files directory 1 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-01-09_d58be91bbde28ba7c6550decb5e8ee79_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-01-09_d58be91bbde28ba7c6550decb5e8ee79_icedid.exe"1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\runtime\redistribution.exe"C:\Program Files\runtime\redistribution.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
422KB
MD569b78d6fed1cd69ac0395b9d73a6c354
SHA156f373b3e9620447db73ebe3558b1bba5fff3857
SHA256cdd5471ad39538e69b3820b14098cd2310ccbaeff44d256b981c0d791418a716
SHA51233d0a60c44f2d3376f2934b2d537bdc1d49ee58cbf7576e7eabe94e5a063a85cd96a05bc9866665cdee46faf8ff0bf894bfd180a4877e3d18fe401205b480313