Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
117s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
14/02/2024, 02:51
General
-
Target
2024-02-14_989dd3d293225f3a8b103ef939d1cf74_icedid.exe
-
Size
423KB
-
MD5
989dd3d293225f3a8b103ef939d1cf74
-
SHA1
34c7a6ecd12c9af76a5e8d7b3447c7d46c7c28dc
-
SHA256
0143e1a14f006ee1b68cbcf2c3d36b986f481d0fd9f3eac00e78adbd13dc5ddc
-
SHA512
222ca00d22da6b115e920acf7efe27b4500501f427cf26ab5ab60502637cb83411f4b8ba20bdf4208d873b7443039bb6c623090e5cdd7555b5bad6d7fa1d3a97
-
SSDEEP
12288:RplrVbDdQaqdS/ofraFErH8uB2Wm0SXsNr5FU:jxRQ+Fucuvm0as
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 2 IoCs
-
Drops file in Program Files directory 1 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-02-14_989dd3d293225f3a8b103ef939d1cf74_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-02-14_989dd3d293225f3a8b103ef939d1cf74_icedid.exe"1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\development\appropriate.exe"C:\Program Files\development\appropriate.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
423KB
MD56ebbe108be41ceda047203d2551532b5
SHA1e687d080b9d96b7c2d43db52bf08d051f865085d
SHA25675f84b607e418cf0d82e37f0a3a563bc33084c1ba689e73c3be22f1c91fd25b6
SHA5122166cd474ae74dad43bac40d02707f77a3baa7710585fe443ae2439d27961624955b210d227422be139686b2c3d21267a6ab7e369e1b9f11af49131adc1a87fe