Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
149s -
max time network
199s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
18/01/2024, 22:27
General
-
Target
2024-01-18_129601aa2a51e55896edd0302d8a697e_icedid.exe
-
Size
311KB
-
MD5
129601aa2a51e55896edd0302d8a697e
-
SHA1
6090e9dee43df3eb9ace45aa4cf3a859cb6c631d
-
SHA256
fc97f833442b9ea2918889b012bf05735fc9088c69659b075686bfb99a6de5b2
-
SHA512
2fa423a2add8d6af96ad02c39b03de55252227584e2572c0449198e7aabc5d2a732d534922eec3152ffc15e37fafba16723600a4ec5a9f1743d2e362d7a3c824
-
SSDEEP
3072:lxUm75Fku3eKeJk21ZSJReOqlz+mErj+HyHnNVIPL/+ybbiGF+1u46Q7q303lU8O:fU8DkpP1oJ1qlzUWUNVIT/bbbIW09R
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Drops file in Program Files directory 2 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-01-18_129601aa2a51e55896edd0302d8a697e_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-01-18_129601aa2a51e55896edd0302d8a697e_icedid.exe"1⤵
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\Security\topics.exe"C:\Program Files\Security\topics.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
312KB
MD551b5d793b8f4335050359b583ddd22a2
SHA1e11264f19ad361319781c6751376d3fba384aa71
SHA25686da73ef5e3be2c83dc549f75fd7a7706ba8b7698eba75297d280ff95c860a47
SHA5129e00991ee73c78e2f8b42999f0d96f4508a83e9ea9f5dd9afd39fdf355c5d3a9f93e28975c89ce2bab99d3330336037d13da1f85a67820fe223b81fc17b94909