Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
120s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
28/03/2024, 14:50
General
-
Target
2024-03-28_c4cb0902eda2767ed9def853265975bd_icedid.exe
-
Size
389KB
-
MD5
c4cb0902eda2767ed9def853265975bd
-
SHA1
04f88d89ed4551a9e6e6747d1e85eae614cd45ef
-
SHA256
df78f595bf2144167b97b5b118c6de0d60498e17fae86aa9c57b7a376dee9f19
-
SHA512
3b792865a31fd04a70f14d9e44b47909511fcc35827685a87ed655a4d5138fdbcd5b021da9ae097b3f947db6159c5988069c05f5e86dc21dabfd123fa8d044b5
-
SSDEEP
12288:BplrVbDdQaqdS/ofraFErH8uB2Wm0SXsNr5FU:TxRQ+Fucuvm0as
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 2 IoCs
-
Drops file in Program Files directory 1 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-03-28_c4cb0902eda2767ed9def853265975bd_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-03-28_c4cb0902eda2767ed9def853265975bd_icedid.exe"1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\boxes\integrate.exe"C:\Program Files\boxes\integrate.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
390KB
MD5da8d02e984066cad33f9b02b0fe8f6fa
SHA105445807a399312c922cfa0fd4bbb4d243d7c7b3
SHA2564bb3a10f38b151c95fa62a138ca4a716e3b7f36a3fd9e06611938ffb0b57bebd
SHA512f63147c41da762e253e1c6616d97e6a1d978cde644bbcb97c09c5c2f75001cda750639214cb32116f5076365cd6cb79b9ddf9a5539837dfee37e656f3f85de7d