Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
146s -
max time network
156s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
-
submitted
10/04/2024, 12:07
General
-
Target
7a6c42343b3d422c9f6f5c72763645b8f1b4931c609c320e60816aee55e4ae8a.exe
-
Size
1.1MB
-
MD5
6dc83f59165bb7ef47fa4028cf3f6654
-
SHA1
0629137b72eeb02e7cc74043bda5874696bba386
-
SHA256
7a6c42343b3d422c9f6f5c72763645b8f1b4931c609c320e60816aee55e4ae8a
-
SHA512
40a897766f42395a2bfe7be6f4d282f38ef67b94183f9625b6241d811a17b13a1349cef7a28972138ac28bc103d3cb956316eb820462ad6710b038f0f6b1701a
-
SSDEEP
24576:NgTtzuYfOKKVQPUDMNjkvBQ8SEopL+rEhKPVrRyxQbI4rj:UtzGPYLys
Score
10/10
Malware Config
Extracted
Family
icedid
Campaign
468039940
C2
arelyevennot.top
Signatures
-
IcedID, BokBot
IcedID is a banking trojan capable of stealing credentials.
-
IcedID First Stage Loader 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\7a6c42343b3d422c9f6f5c72763645b8f1b4931c609c320e60816aee55e4ae8a.exe"C:\Users\Admin\AppData\Local\Temp\7a6c42343b3d422c9f6f5c72763645b8f1b4931c609c320e60816aee55e4ae8a.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
44KB