Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

2024-01-11...id.exe

windows7-x64

7

2024-01-11...id.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    12/01/2024, 06:06

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    2024-01-11_dd272a71a20ef0948d99d6497566ff2d_icedid.exe

  • Size

    424KB

  • MD5

    dd272a71a20ef0948d99d6497566ff2d

  • SHA1

    38e8866652ac92c5c24c03d278e1ff77cd4f4acd

  • SHA256

    da1c9c4949812febf56834f7d3b8e675da4d72417111a5a27d59aff32ef24e0f

  • SHA512

    9ea372c4c5a3292370ba87174a333dfd6913393c1184522ac587029250ff539600a40a47ee896198b087286c1027bb766352f1693660662a0d8acb8c7b76d169

  • SSDEEP

    12288:aplrVbDdQaqdS/ofraFErH8uB2Wm0SXsNr5FU:2xRQ+Fucuvm0as

Score
7/10

Malware Config

Signatures

  • Executes dropped EXE 1 IoCs
  • Loads dropped DLL 2 IoCs
  • Drops file in Program Files directory 1 IoCs
  • Suspicious use of SetWindowsHookEx 8 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Dsetup2\proper.exe
    "C:\Program Files\Dsetup2\proper.exe" "33201"
    1⤵
    • Executes dropped EXE
    • Suspicious use of SetWindowsHookEx
    PID:3000
  • C:\Users\Admin\AppData\Local\Temp\2024-01-11_dd272a71a20ef0948d99d6497566ff2d_icedid.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-01-11_dd272a71a20ef0948d99d6497566ff2d_icedid.exe"
    1⤵
    • Loads dropped DLL
    • Drops file in Program Files directory
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2976

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Program Files\Dsetup2\proper.exe
    Filesize

    92KB

    MD5

    e6c789d4115252fd97be0864cf8e2483

    SHA1

    1fffe6e132eec8c5ce64fb7511a71b1d53f6e820

    SHA256

    799cc645eb52aab0d99050f3ffb934dae4ed2e537a48aa1cdca27cfeedfc555b

    SHA512

    959fe9462440b81177fc163278ddf164a7afff27a9e54b5d3d5ed04350cb71e60f09d1ffd008b31dcda773e8b78303d2f898b559cf061020b9cf99281f7c3f75

    Download Submit

  • \Program Files\Dsetup2\proper.exe
    Filesize

    381KB

    MD5

    db81379f2aec6f5991ed0d3ab1b9339e

    SHA1

    cb2d28e7b7492240c506b4df43e424f48aeb958b

    SHA256

    5dd05961c1628b1273d0b1c86d1bea4c9e33339b4d387d1eac85541452bac6f3

    SHA512

    1c68459bc92ea93f5410f207fd441aa571afdeb630773c5743cb000149640b3c45263210d534e0efcb591a45baa17bb5de4760a8e1eff8584eff0d7d218971c0

    Download Submit