Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
121s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
28/03/2024, 00:54
General
-
Target
2024-03-28_e3f7de4078af3d29637caf482b7fbc4b_icedid.exe
-
Size
420KB
-
MD5
e3f7de4078af3d29637caf482b7fbc4b
-
SHA1
92d2caf48fc123ba0be6b0c169472239974ec688
-
SHA256
376121a2bcf20c3f39a0cef55e6a0523fc812bdd3389c3da96a6ac3a8faf321b
-
SHA512
4f8f50d4caf4803851ef6d4141cff47661a437061a0fb13c5b4faed837eae41e46a8174c8f585977c55ab6bc81b22bd98342608f3efb2c25abcdc2b1abea41ba
-
SSDEEP
12288:EplrVbDdQaqdS/KfraFErH8uB2Wm0SX/Nr5FU:AxRW+Fucuvm0a/
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 2 IoCs
-
Drops file in Program Files directory 1 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-03-28_e3f7de4078af3d29637caf482b7fbc4b_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-03-28_e3f7de4078af3d29637caf482b7fbc4b_icedid.exe"1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\having\towrite.exe"C:\Program Files\having\towrite.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
420KB
MD5ef76d9b2eddb77851d63353c5ce8d24d
SHA15c2197f801d0d8d01f60bda4862d9108d342626e
SHA2568f0927fbd3107431dabc44b52c691efe98fedc6758153a85dcfd6a99faa08cc2
SHA512449f8ca1ed615695fc8aa9e7c605b2bf39cf0065e8599d36c888c09c7bd210ac8878b0185e72fb11971606661b0e6dfe2b03ead7fcaab8926ab54f412243e7eb
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.4MB