Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
-
submitted
25/01/2024, 17:56
General
-
Target
2024-01-25_81f62ee6de1cc5614f6756775bda1187_icedid.exe
-
Size
383KB
-
MD5
81f62ee6de1cc5614f6756775bda1187
-
SHA1
e40093b5b2ac142e4fcd5506bc8593d0d8ba5d54
-
SHA256
48ff4ecf61bde36233b6c4d9820a1aa608de812d9d4901956f1a9e66f7c68173
-
SHA512
14c4757b3ae820272044a811ce3d16e3355f7b19594d42391a123de5dc716932d9ab764d39e765335135de59784cc02be1595db043dabf751e45467de75e09b9
-
SSDEEP
6144:eplrlbbDdQaqd2X/96fr3KFEUGjr8uB2WgcA0cpXEVNrvGZ4FUqm6:eplrVbDdQaqdS/ofraFErH8uB2Wm0SXj
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 4 IoCs
-
Drops file in Program Files directory 1 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 7 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-01-25_81f62ee6de1cc5614f6756775bda1187_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-01-25_81f62ee6de1cc5614f6756775bda1187_icedid.exe"1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\demonstrates\Dinstall.exe"C:\Program Files\demonstrates\Dinstall.exe" "33201"2⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
383KB
MD5b5c1d6099e893d874a1884283149f520
SHA1371d181fee5af23d62400b265168a18b480b03d7
SHA2567e19bb374a76afbd2698ffaf1cd91064cfaa78755e4158600df3145cd772b950
SHA512782ddda3538c7acba848bb926e0238ba7c95afcfd55a720c8c5388e149c5f293b15fc8a54969978365d9cba8e23753600e29ba3c681e4ed4fd4dd10c3bce3bb9