Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    118s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    02/02/2024, 09:43

General

  • Target

    2024-02-02_1ee9e368552e22799af93651794a2f10_icedid.exe

  • Size

    2.8MB

  • MD5

    1ee9e368552e22799af93651794a2f10

  • SHA1

    0788dd962ab6689833b00570827b5f6d699ab1f4

  • SHA256

    80693cbd00dca48f9533d8c658e5bd437bd3fcb0783c437220ed00b51fc88d8b

  • SHA512

    3d093ce5995f71926d7f2695285da1ee87713a09e0d2bee20543cb6af07308e179e71759e2c5b3d4a0265306b5458d61c185b9ebcff8b5dbb3ebfa772fdc5668

  • SSDEEP

    49152:MjZbeFjNfCZB7p25g4crYNm8owIhJjt6zwH4wBHwZbeRp:EZ8jYBE5csA8Y6zwH4wVwZyR

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-02-02_1ee9e368552e22799af93651794a2f10_icedid.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-02-02_1ee9e368552e22799af93651794a2f10_icedid.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:1420

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1420-0-0x00000000003E0000-0x00000000003EA000-memory.dmp

    Filesize

    40KB

  • memory/1420-1-0x00000000003E0000-0x00000000003EA000-memory.dmp

    Filesize

    40KB

  • memory/1420-2-0x00000000003E0000-0x00000000003EA000-memory.dmp

    Filesize

    40KB

  • memory/1420-3-0x00000000003E0000-0x00000000003EA000-memory.dmp

    Filesize

    40KB