Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
120s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
14/02/2024, 02:22
General
-
Target
2024-02-14_04fbb2a24abffcfa666c7cffd306e885_icedid.exe
-
Size
426KB
-
MD5
04fbb2a24abffcfa666c7cffd306e885
-
SHA1
486d7d9ff62d29170a9845da628c6b0b40699a72
-
SHA256
b8a4b17be14b1ccfdfde3a9ef26ba37aae2cdfa73c1e5e79e4f330d32cfb4caf
-
SHA512
f3dc160869396ad2c813744987e4636f69778602adb9a386af85bceca0a6f0314d28a09f9eb6f386199777e917e05326ffe4745635f136c8acd6c6dbd108b4d4
-
SSDEEP
12288:yplrVbDdQaqdS/ofraFErH8uB2Wm0SXsNr5FU:+xRQ+Fucuvm0as
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 2 IoCs
-
Drops file in Program Files directory 1 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-02-14_04fbb2a24abffcfa666c7cffd306e885_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-02-14_04fbb2a24abffcfa666c7cffd306e885_icedid.exe"1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\French\German.exe"C:\Program Files\French\German.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
426KB
MD538a1c5fb04f672bd8d1824ce7fd614d5
SHA135ffa633e2bcbe944868dc79f5250b9c011fa39a
SHA256101fcf052db0a5107fa578b65a3d3de09e532bd6a4b753b45fec2b3389f44511
SHA5129c3b84032d54ad7e36ad0c886f8f425fb7fe38d9da5f0395120300f1b41fc4447619de89b61b478aa35b3b608cb43fbeb93ae21cd234d9744f2cbf6a3f93791b