Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
118s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
29/01/2024, 04:32
General
-
Target
2024-01-29_595c0856fa614ba0e9018acf0bbbfc33_icedid.exe
-
Size
389KB
-
MD5
595c0856fa614ba0e9018acf0bbbfc33
-
SHA1
d8dc0c20975eb2aba75a5be828b9fd12eaabe5e1
-
SHA256
e72f6bee25a923889f2bd02b0058925bd865eec5c69a5fca07f95c48d44b4259
-
SHA512
82c1af562848a764477213810dc418bcb8095f714e2098124724fc4b70b1607e7de2d81e0df30fb122af89d22ba4d0b882f1afc07283029ad7fa59ab0d164800
-
SSDEEP
12288:9plrVbDdQaqdS/ofraFErH8uB2Wm0SXsNr5FU:fxRQ+Fucuvm0as
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 2 IoCs
-
Drops file in Program Files directory 1 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-01-29_595c0856fa614ba0e9018acf0bbbfc33_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-01-29_595c0856fa614ba0e9018acf0bbbfc33_icedid.exe"1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\Platform\December.exe"C:\Program Files\Platform\December.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
389KB
MD55853c8265b30176bc174fcff77bdcf5d
SHA16382d2c93a165717b228ac584b10a7c132c5cac3
SHA256d77e655a73ebd7ae7e0c6ce07839a0a565fabb44b962dc273e7d0f490763c4cb
SHA5123167226a3842ecd829e8c6d0593aedd658bfcadebef08d9ed8a3ce55d6268ea1461679ed2949cadb3744585c52217b8d98cf222cde5ebd0dc0826519ae1251e8