Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    149s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    05/03/2024, 19:46

General

  • Target

    2024-03-05_b6aa458d756f1a37d346068e736a6042_icedid.exe

  • Size

    417KB

  • MD5

    b6aa458d756f1a37d346068e736a6042

  • SHA1

    7545ed299b467013b5c48a810216cf58ee705894

  • SHA256

    1834dfb30145a8fbeb6f0ba5cdeec192f5308214b3f63f15fd684ecb3e6ee90b

  • SHA512

    959cf896b2fa2cb4ef9b83c436900a84f4dd5a8d97b2435507b88337340a7bd2bacba6f3f06003533ee118e8c3b3630c8f4a7b33d03fc19104142d71a0290085

  • SSDEEP

    12288:rplrVbDdQaqdS/ofraFErH8uB2Wm0SX/Nr5FU:dxRQ+Fucuvm0a/

Score
7/10

Malware Config

Signatures

  • Executes dropped EXE 1 IoCs
  • Drops file in Program Files directory 1 IoCs
  • Suspicious use of SetWindowsHookEx 8 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-03-05_b6aa458d756f1a37d346068e736a6042_icedid.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-03-05_b6aa458d756f1a37d346068e736a6042_icedid.exe"
    1⤵
    • Drops file in Program Files directory
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:4408
    • C:\Program Files\Installing\DirectX.exe
      "C:\Program Files\Installing\DirectX.exe" "33201"
      2⤵
      • Executes dropped EXE
      • Suspicious use of SetWindowsHookEx
      PID:2544

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Program Files\Installing\DirectX.exe

    Filesize

    384KB

    MD5

    839544abb87a6684a2af35e77ab3435c

    SHA1

    b111cba28c18c7269d64a720dc895ab88340f869

    SHA256

    2271275023a9681aeb929e8f4ee7c8535662cebe618685f3e5b0b9ab57088588

    SHA512

    0e82bf3ba90a297c36ecfd36f860c1c539029841ffdf481c2a28f234671c5a98ed131b01fcef28b93b76d936518dd67ce556810d504b0631c3bcb4e860ee4bf1

  • C:\Program Files\Installing\DirectX.exe

    Filesize

    192KB

    MD5

    64c92711105a56d67878ef71a4ee61c8

    SHA1

    e32c123751be82b5bc1396ee0b05df448fe361bd

    SHA256

    c6f66b782318b8aba0cffd7da3d2db0285d3ff910ad7750d56dd685c164a20a5

    SHA512

    8c4bceee0196088c68c3f05dda940817111ba883400ee3af920a617258ffcf6a2140ebf2c90732e232a4ea60f42a91eaf79a3dc3452adb9b7adbf278c6d84a25

  • memory/2544-4-0x0000000000400000-0x0000000000573000-memory.dmp

    Filesize

    1.4MB

  • memory/2544-7-0x0000000000400000-0x0000000000573000-memory.dmp

    Filesize

    1.4MB

  • memory/4408-0-0x0000000000400000-0x0000000000573000-memory.dmp

    Filesize

    1.4MB

  • memory/4408-5-0x0000000000400000-0x0000000000573000-memory.dmp

    Filesize

    1.4MB