Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
122s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
19/03/2024, 23:38
General
-
Target
2024-03-19_9a067a657139b250ebbe78657829861b_icedid.exe
-
Size
316KB
-
MD5
9a067a657139b250ebbe78657829861b
-
SHA1
05eee6ccc57fc039f47a391503bdb4a47401e7e8
-
SHA256
2970db90e2971f3a8c555961a567fc24ffd18d9e54415e0a4f98d7f4c43d8932
-
SHA512
87da5eacba78d85e8cfa14688412ec5e5583bd7d751b1fc7dcbd59f6ebb04897c3528a8ba678dce91ac339c414bb921935e3131af4115972d2d91c674eb9cfa3
-
SSDEEP
3072:lxUm75Fku3eKeJk21ZSJReOqlz+mErj+HyHnNVIPL/+ybbiGF+1u46Q7q303lU8O:fU8DkpP1oJ1qlzUWUNVIT/bbbIW09R
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 2 IoCs
-
Drops file in Program Files directory 2 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-03-19_9a067a657139b250ebbe78657829861b_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-03-19_9a067a657139b250ebbe78657829861b_icedid.exe"1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\December\future.exe"C:\Program Files\December\future.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
316KB
MD5428a2e7b8c18612da2b6fe2b5a9d0844
SHA153a83167f2dea4c695082c6abba2cb0ec909a303
SHA25614dafe78b5fa2eff528244eaf176e9c8a48ea72340495468271fca059c35002a
SHA5129353cdbfa26560f3cb71e92409eeb632e3ded1747a8076e2da794a381d87d875f82871aadd6cbf040312eb0dab4824809549e14b21698b20d1d42fd8e73a84b0