Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
06/03/2024, 21:52
General
-
Target
2024-03-06_b7c3267000d4afe70e83f1d48ee4d44a_icedid.exe
-
Size
417KB
-
MD5
b7c3267000d4afe70e83f1d48ee4d44a
-
SHA1
670f412f5f8573a975b3e1181891c19475bf7868
-
SHA256
a7ba7c32ecaffb849ec08f3736a2973c2f1d656071442bc29768f193bfda4c90
-
SHA512
011185189965c13e0e655b0c1a1207a89b3e4026ee58c999b3960134898fdaca18a85f35a47ff3342a309aff95df510cd3b761d1937157a83c1d6664b2e48b4f
-
SSDEEP
12288:yplrVbDdQaqdS/KfraFErH8uB2Wm0SX/Nr5FU:+xRW+Fucuvm0a/
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 2 IoCs
-
Drops file in Program Files directory 1 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-03-06_b7c3267000d4afe70e83f1d48ee4d44a_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-03-06_b7c3267000d4afe70e83f1d48ee4d44a_icedid.exe"1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\Schirmer\Addison.exe"C:\Program Files\Schirmer\Addison.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
417KB
MD5f6e0f60bcb2dcfd248323e59646a64c2
SHA175634704c08a4a91d4a0a5f463021737fcdd6172
SHA256fb861f853e0d3bd34652a21b651827a48ff0e7b1327a1f6e63d56694af29d78b
SHA5127664281c07e22c7bed047c3df733ad75b1b81ad4242aa3d14c767afaf225eccca369b71f112e1c19c9bfe0533620519cb93a0f106f6c0013156c03b5e61ddcdd
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.4MB