Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
91s -
max time network
124s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
18/02/2024, 10:45
General
-
Target
2024-02-18_c289f1bb52ff6117c5534b2800331b7a_icedid.exe
-
Size
427KB
-
MD5
c289f1bb52ff6117c5534b2800331b7a
-
SHA1
2e0ab6e812e15d6712c0b4481e8dffc02b3f0a14
-
SHA256
79378fc998dec2e3837ab591e1e28ae45a1ed36d7a0aba1401c6da633ecf6751
-
SHA512
f043efd14084c3df2f01b235b9f8227a294e491782230eb7f149d127ca817f233c5ef4bde260e8132092df4e57e5d2c4a68cedfdafcf795dd4537cda54d6ce92
-
SSDEEP
12288:gplrVbDdQaqdS/ofraFErH8uB2Wm0SXsNr5FU:8xRQ+Fucuvm0as
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Drops file in Program Files directory 1 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-02-18_c289f1bb52ff6117c5534b2800331b7a_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-02-18_c289f1bb52ff6117c5534b2800331b7a_icedid.exe"1⤵
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\purposes\available.exe"C:\Program Files\purposes\available.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
427KB
MD57120f1e21d22fceaae170d00a0f3df06
SHA1dfa1bf80b37f35914a7ccf4f8995b62edf975c31
SHA256734e2bcbdbb368eae5074050e031e40cea128a3bbcaedce99c70cf6d021accde
SHA5121391d85c15d2b05836e8a15341cbaa5cf2a3483ba40ec57aeae1a8a0052ea1ab7f96022b0e8bf26a45dde18126b260ec079d57d6a66b57c8d72ad67386f27f6a