Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
118s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
22/02/2024, 18:31
General
-
Target
2024-02-22_a2a41d32d7046627a140c2dc32e9e17c_icedid.exe
-
Size
415KB
-
MD5
a2a41d32d7046627a140c2dc32e9e17c
-
SHA1
15d7255131850848b2d2f30a15b21cdfc1b56b4d
-
SHA256
3dd6c19d466ef87bea2fb4665f83e51ce9a3bf340fd0fd20ed3c947dec9a87cf
-
SHA512
7d75f013679e892a26f8e8f8ed1ad96cf3e636b77e4524bdd515c325f92a961f8927a90ab8ba4044f143ba7a311f16179811c96cf9afc7772859854832d75800
-
SSDEEP
12288:UplrVbDdQaqdS/ofraFErH8uB2Wm0SX/Nr5FU:QxRQ+Fucuvm0a/
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 2 IoCs
-
Drops file in Program Files directory 1 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-02-22_a2a41d32d7046627a140c2dc32e9e17c_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-02-22_a2a41d32d7046627a140c2dc32e9e17c_icedid.exe"1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\accordingly\Panel.exe"C:\Program Files\accordingly\Panel.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
416KB
MD511ef9de4afffec3112909409e9fc16be
SHA15a04f01475272c15ff6469a4b5c0d429e5340e32
SHA256a523a4e8de9d3eab469379a16106943b080b97d18115b2077f53626bba0ed21e
SHA512e1fca3fa59ed065aa6712d261651318f453558033f13607425e7d09ff176597dff5160989bcc6211b53cf4bbc469a3016032b5abc425fcf2d049f1e69fe57c1e
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.4MB