Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
12/02/2024, 14:36
General
-
Target
2024-02-12_7d7c766e4d58a0df0ad92ad1fb2845f8_icedid.exe
-
Size
387KB
-
MD5
7d7c766e4d58a0df0ad92ad1fb2845f8
-
SHA1
a3912af25d88bf3fd92ea8ed2748ee8d92917bdf
-
SHA256
f23638aa4356ce67ca0cc5a5f27faf529e5feb3c3cbf77b6c9b6b6efc12dcb44
-
SHA512
5c97a2d39325213f39beefd8c4853c35fa1b1c717996afb89b28aa5579adc6bd0c7fd6d97d4ee274e6a7c18b3522d41996e4f7c2962b217289fd6294ac49143f
-
SSDEEP
12288:kplrVbDdQaqdS/ofraFErH8uB2Wm0SXsNr5FU:gxRQ+Fucuvm0as
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 2 IoCs
-
Drops file in Program Files directory 1 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-02-12_7d7c766e4d58a0df0ad92ad1fb2845f8_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-02-12_7d7c766e4d58a0df0ad92ad1fb2845f8_icedid.exe"1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\French\German.exe"C:\Program Files\French\German.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
387KB
MD5b0ee6cc1260d29f85b54e7026b91c41d
SHA10f5dfd2609433eef38529b9e1e6d8682ba452ee4
SHA256bef3ef197fe5def6eb5d67de7a36467a93ed0e70c5aea8e132aa5f7f34161f4c
SHA51267a159ab1a2dee10f4b2e998789268afed43999bba33a3e65b30df66f630be9dbdbe3dc04abacd24e0b79015fec2132c697d22d977ba34c3f57b12b4cbaa6087