Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
137s -
max time network
123s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
-
submitted
25/03/2024, 22:28
General
-
Target
2024-03-25_2d76c6f9ce4b5d7378a3ed79bd90651c_icedid.exe
-
Size
317KB
-
MD5
2d76c6f9ce4b5d7378a3ed79bd90651c
-
SHA1
a8a5bcefb16bcc19069fdd6613e1ad3dd42f84bc
-
SHA256
b21021005c576a2a893fa07a82489372b0059ed3c7f97a647cb7d91a5cf1ecfd
-
SHA512
9dd56fac2b58013df88c3b96de9a86e7856dcdc76a49475be173e5bf1d41f4d4f9a7433d6e8946f1d465ddb038d0ef85b7c1e432071b38f952974e852999aea1
-
SSDEEP
3072:lxUm75Fku3eKeJk21ZSJReOqlz+mErj+HyHnNVIPL/+ybbiGF+1u46Q7q303lU8O:fU8DkpP1oJ1qlzUWUNVIT/bbbIW09R
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Drops file in Program Files directory 2 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-03-25_2d76c6f9ce4b5d7378a3ed79bd90651c_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-03-25_2d76c6f9ce4b5d7378a3ed79bd90651c_icedid.exe"1⤵
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\code\verify.exe"C:\Program Files\code\verify.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
318KB
MD5b7324539527b3a81158c5f828a2c5232
SHA1fcc5909ecdbabbee542484dd6d7f5274652651e7
SHA2566a5254a1ffa957ba65491d228b7b17b78df536d1b9098ddfb7ea075d03568cdf
SHA512be517bade090ce915bd40311b4d012782cb7b146e5453334ad948d43cadd68682e18529f616ac1e308b4746945a77839bf0b08d0afb238658741ac76d029d7f5