Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    133s
  • max time network
    155s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231222-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
  • submitted
    18/01/2024, 23:20

General

  • Target

    2024-01-18_c567bfb248f5ea65918f03853aa7060c_icedid.exe

  • Size

    424KB

  • MD5

    c567bfb248f5ea65918f03853aa7060c

  • SHA1

    411c6ce3a4f0af97aa5ad2115273ac6cccbf47b1

  • SHA256

    79bd0a59f45b16c832e02f00a02c07d5f31673aa9ae1fb1e894651ebf4e03605

  • SHA512

    0cef3023648cbe4f8b0d84f738c4e863aa722c782f94617e8006d095b6b5dd88224daa191c30882e2fb9ffc12a4603446b494ea3e30d650be267992670f94db8

  • SSDEEP

    12288:9plrVbDdQaqdS/ofraFErH8uB2Wm0SXsNr5FU:fxRQ+Fucuvm0as

Score
7/10

Malware Config

Signatures

  • Executes dropped EXE 1 IoCs
  • Drops file in Program Files directory 1 IoCs
  • Suspicious use of SetWindowsHookEx 8 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-01-18_c567bfb248f5ea65918f03853aa7060c_icedid.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-01-18_c567bfb248f5ea65918f03853aa7060c_icedid.exe"
    1⤵
    • Drops file in Program Files directory
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3696
    • C:\Program Files\Trip\Multimedia.exe
      "C:\Program Files\Trip\Multimedia.exe" "33201"
      2⤵
      • Executes dropped EXE
      • Suspicious use of SetWindowsHookEx
      PID:1484

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Program Files\Trip\Multimedia.exe

    Filesize

    424KB

    MD5

    790355c89415b57b4c9c29a10284e897

    SHA1

    bbaa6fad944a350c7e32eb1ddea3435b74dc0a25

    SHA256

    d672867778dd97969bdf62d77a7082f512a6b71db01d7cc4bbef9f33aa421d10

    SHA512

    573f86fa75517388a41a15a9f49339fd5e2f57601183941ad94187236a37298fae6a24333c14715a1eb20200dbd3fa002f44fb0c2c29a8109f692b5345215522