Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
147s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20240221-en -
resource tags
-
submitted
22/02/2024, 05:29
General
-
Target
2024-02-22_221964d6a6be957315c8b7720f0799bc_icedid.exe
-
Size
315KB
-
MD5
221964d6a6be957315c8b7720f0799bc
-
SHA1
ec14e84fbb3e91b3cfc265afc5950cef334d66fd
-
SHA256
84da3d3105c421bd4c625026310db3d237ff5568155661d079ab3a10bdebf449
-
SHA512
2181c043446fe337e06623744e54b3bd2432a77751fcb512d843153f93aacc2b142983c0f99d9eeec1500842bce04a287d2fe7d33f2e47c28b00d5a0283f484a
-
SSDEEP
3072:lxUm75Fku3eKeJk21ZSJReOqlz+mErj+HyHnNVIPL/+ybbiGF+1u46Q7q303lU8O:fU8DkpP1oJ1qlzUWUNVIT/bbbIW09R
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Drops file in Program Files directory 2 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-02-22_221964d6a6be957315c8b7720f0799bc_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-02-22_221964d6a6be957315c8b7720f0799bc_icedid.exe"1⤵
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\option\silent.exe"C:\Program Files\option\silent.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
315KB
MD5e52a0a461994b9a940a26fc42f2ed7ed
SHA121d5a4a0571d4af2b10f567632bfcc68f184c44e
SHA256805f3d3adc36ca5700c9fa3ca64d578ac27e43b674ae1d31410460564309bd14
SHA5120d63accf4edce46205f1a82da18a57306bc0d65f549471f316049d562e32a1775977f35c445d1cff4669ca4d7958586336dd3a3d6af47840398e9db73c12e636