Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
121s -
max time network
129s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
14/03/2024, 15:26
General
-
Target
2024-03-14_10d8add7423a198bcdcd78b5d3f2b03a_icedid.exe
-
Size
316KB
-
MD5
10d8add7423a198bcdcd78b5d3f2b03a
-
SHA1
01874d6eb8ec111111af74888e691ba74424da13
-
SHA256
a88dd3764b817de70e70e14a7fe162ab4b6fc67afecbbd552c10cf290d782470
-
SHA512
cc287085965067587b68b0802d0b35e7143a7b8126c2ba37caf01a75ff4d5bc82568265543c665e8d7ce3cf99d099718b4ef8dbb0613762ebf2a080e92bc5a86
-
SSDEEP
3072:lxUm75Fku3eKeJk21ZSJReOqlz+mErj+HyHnNVIPL/+ybbiGF+1u46Q7q303lU8O:fU8DkpP1oJ1qlzUWUNVIT/bbbIW09R
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 2 IoCs
-
Drops file in Program Files directory 2 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-03-14_10d8add7423a198bcdcd78b5d3f2b03a_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-03-14_10d8add7423a198bcdcd78b5d3f2b03a_icedid.exe"1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\function\necessary.exe"C:\Program Files\function\necessary.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
316KB
MD53bb520c5d9c8aa2df95703b94c95855b
SHA1a0bd6ba7b2056ba0fac5bdbbea0ad9196902a72c
SHA2565fae708b05512e39f3db9d14813b1c21e46a7a43b59a1063f1a36a5eb4d5463c
SHA5121ad7b49968d47bfca3147d27dff80783bf29eb2f0aac28133c5c5ff493425d39fccf1a079b3249c88334b9c807d2556bfd2620383d8a364199c39db8dcfc8bea