Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
118s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240215-en -
resource tags
-
submitted
18/02/2024, 10:45
General
-
Target
2024-02-18_c289f1bb52ff6117c5534b2800331b7a_icedid.exe
-
Size
427KB
-
MD5
c289f1bb52ff6117c5534b2800331b7a
-
SHA1
2e0ab6e812e15d6712c0b4481e8dffc02b3f0a14
-
SHA256
79378fc998dec2e3837ab591e1e28ae45a1ed36d7a0aba1401c6da633ecf6751
-
SHA512
f043efd14084c3df2f01b235b9f8227a294e491782230eb7f149d127ca817f233c5ef4bde260e8132092df4e57e5d2c4a68cedfdafcf795dd4537cda54d6ce92
-
SSDEEP
12288:gplrVbDdQaqdS/ofraFErH8uB2Wm0SXsNr5FU:8xRQ+Fucuvm0as
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 2 IoCs
-
Drops file in Program Files directory 1 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-02-18_c289f1bb52ff6117c5534b2800331b7a_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-02-18_c289f1bb52ff6117c5534b2800331b7a_icedid.exe"1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\redistribution\purposes.exe"C:\Program Files\redistribution\purposes.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
427KB
MD59f46283144034d037c9d40cf15507cf8
SHA1f254eff405e9b7a60df3fc718a88d660b209694b
SHA256787a46ad95b26e20c08f58ec9b329ff53c7945f311bf7297d69b40fe5aa5eae6
SHA5125c595e96dfe2ea639b0ba743b1f2b0e3fb90153a4428808f1b62c3a814b47b0b261435a84213d87862f0e0e959cd24472e801ca2eaf1347039cb8a1716f570a5