Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
145s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
13/02/2024, 08:33
General
-
Target
2024-02-13_5c1ddcd8c735fba53ad912388516b877_icedid.exe
-
Size
311KB
-
MD5
5c1ddcd8c735fba53ad912388516b877
-
SHA1
1e2263688fd7e6827a313a6f12a549710c862d05
-
SHA256
25c93e9513eec385b56409c2a2c557449897fc4edaf5f2e0f6ee1dd7f702a768
-
SHA512
142af95770562f914c70e94932950014be5a642b01820cc538f9c6387a341457d2bc9fb831e971f82d3d8409ac706c4eef307c64f1ec6ed2961e5262e53d2914
-
SSDEEP
3072:lxUm75Fku3eKeJk21ZSJReOqlz+mErj+HyHnNVIPL/+ybbiGF+1u46Q7q303lU8O:fU8DkpP1oJ1qlzUWUNVIT/bbbIW09R
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Drops file in Program Files directory 2 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-02-13_5c1ddcd8c735fba53ad912388516b877_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-02-13_5c1ddcd8c735fba53ad912388516b877_icedid.exe"1⤵
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\with\DirectSetup.exe"C:\Program Files\with\DirectSetup.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
311KB
MD5b3c47465264f7cae24adc89e1e981671
SHA13567f9310a383a0bb5640109f0c949160a3665a4
SHA2564619c23a087015bd68d81ec3a3f3cfc8a0478a233e0e47eb67cf9d4590d83f3f
SHA512f6825d4adedb7904554afced096abfdb92e8b83c94db9ac64cb41f6f64181a57c45f5a124dfb217e37f6574b5b4b1f427d455133a6920a525dff6b37c6358fb8