Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
117s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
-
submitted
18/01/2024, 22:27
General
-
Target
2024-01-18_129601aa2a51e55896edd0302d8a697e_icedid.exe
-
Size
311KB
-
MD5
129601aa2a51e55896edd0302d8a697e
-
SHA1
6090e9dee43df3eb9ace45aa4cf3a859cb6c631d
-
SHA256
fc97f833442b9ea2918889b012bf05735fc9088c69659b075686bfb99a6de5b2
-
SHA512
2fa423a2add8d6af96ad02c39b03de55252227584e2572c0449198e7aabc5d2a732d534922eec3152ffc15e37fafba16723600a4ec5a9f1743d2e362d7a3c824
-
SSDEEP
3072:lxUm75Fku3eKeJk21ZSJReOqlz+mErj+HyHnNVIPL/+ybbiGF+1u46Q7q303lU8O:fU8DkpP1oJ1qlzUWUNVIT/bbbIW09R
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 2 IoCs
-
Drops file in Program Files directory 2 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-01-18_129601aa2a51e55896edd0302d8a697e_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-01-18_129601aa2a51e55896edd0302d8a697e_icedid.exe"1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\Dsetup2\proper.exe"C:\Program Files\Dsetup2\proper.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
312KB
MD54b92463e7962c3a5c0534ad219e250ca
SHA14e880447c94878e5e709ac6379ed24af1db58ac9
SHA256abfa33faa2202028c8173bbb26ec734ddad7f21a67766f01a33bbe676c40c545
SHA512ffdc4ec83267eff8d03d3c4f9b0fa8740d804f0cdef77cbe397ccc2119829f11c1d402c5eb82051de8b7659e30e65e2c07c0fb69e3432b90413bc9be7f4743a4