Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
147s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
-
submitted
06/03/2024, 21:52
General
-
Target
2024-03-06_b7c3267000d4afe70e83f1d48ee4d44a_icedid.exe
-
Size
417KB
-
MD5
b7c3267000d4afe70e83f1d48ee4d44a
-
SHA1
670f412f5f8573a975b3e1181891c19475bf7868
-
SHA256
a7ba7c32ecaffb849ec08f3736a2973c2f1d656071442bc29768f193bfda4c90
-
SHA512
011185189965c13e0e655b0c1a1207a89b3e4026ee58c999b3960134898fdaca18a85f35a47ff3342a309aff95df510cd3b761d1937157a83c1d6664b2e48b4f
-
SSDEEP
12288:yplrVbDdQaqdS/KfraFErH8uB2Wm0SX/Nr5FU:+xRW+Fucuvm0a/
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Drops file in Program Files directory 1 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-03-06_b7c3267000d4afe70e83f1d48ee4d44a_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-03-06_b7c3267000d4afe70e83f1d48ee4d44a_icedid.exe"1⤵
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\Wesley\Brockschmidt.exe"C:\Program Files\Wesley\Brockschmidt.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
417KB
MD577e1a4a85c008d7e249eed80eb95991c
SHA1fffe7ec6108c29be8558f7248c06f71300338765
SHA2567d46e2e348fa0019bcefba4eaa07313f978d091914a045ca837028cbc6f18653
SHA5126c8c6c28737f9b31f0644a93dc691f98ea32111f1ec67a569e9c75846e7ba646cead564c241760fb6aa971a959d73a8a4ee9c8f579843e5d4d2892818bd12c75
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.4MB