Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
121s -
max time network
128s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
09/04/2024, 15:40
General
-
Target
2024-04-09_cc4d4558445d95445bd290452febb3c3_icedid.exe
-
Size
420KB
-
MD5
cc4d4558445d95445bd290452febb3c3
-
SHA1
a344a48b89ea665be0ba1093bcd831aef03867a1
-
SHA256
58f0ebf7fb2ade707a4f44bff030f761d531dc4d398e387dc731d608cbc88a9b
-
SHA512
6681bef2be71ae77b31a4f31faed256e6ddb485c5ce02816499fee985cfd8633bf82c60fbccb5f9afe42659a73525f0f2e58f554b80db9dff32f6310229ffade
-
SSDEEP
12288:1plrVbDdQaqdS/KfraFErH8uB2Wm0SX/Nr5FU:nxRW+Fucuvm0a/
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 2 IoCs
-
Drops file in Program Files directory 1 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-04-09_cc4d4558445d95445bd290452febb3c3_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-04-09_cc4d4558445d95445bd290452febb3c3_icedid.exe"1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\Tool\GetDXVer.exe"C:\Program Files\Tool\GetDXVer.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
420KB
MD5566136317eae9598efb6dea8c1fdebd5
SHA119e166e9d70ba02db4e8305e8d92c1df7c48e8ef
SHA256ccf2961a705cda57cc5ed5ce247e8ebfc9da9e8c358a70c69c8879bd93d85eca
SHA51246a9ec700d025cdc8ba58d683bd92a2810750c4953850a3cb20921a4173f20dd1e6477c8327736ae2b89fe4c555150867fb51062922def7647a853ffa9093a18
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.4MB