Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

2024-04-16...id.exe

windows7-x64

7

2024-04-16...id.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-04-16_17d59109ea50b3a18b2fa3764ca5698c_icedid

  • Size

    2.1MB

  • Sample

    240416-vcpszafc32

  • MD5

    17d59109ea50b3a18b2fa3764ca5698c

  • SHA1

    f8d6f81123412483bd6b7c4d5c274cfa9641ba5f

  • SHA256

    4bc1777b46f5564b000745086680cb3d68c2f53fecb66cbfe44f50e78d54cfbf

  • SHA512

    e2fc0e7e090824ca6e6ec29c7a3333625d97a6d17f96d4ee06150552d34832e067fe2436f6a3f0337b111071851271311d86ee26496f70704fce9ccd1951eb62

  • SSDEEP

    24576:rxi0HFDXdVtTj2i64T+jdxQCfgOFD3WSwd2QtBBw6xxhVxQtmibjOhZaiRu/4oMN:RlZbTChxKCnFnQXBbrtgb/iQvu0UHOI

Score
7/10
persistence

Malware Config

Targets

    • Target

      2024-04-16_17d59109ea50b3a18b2fa3764ca5698c_icedid

    • Size

      2.1MB

    • MD5

      17d59109ea50b3a18b2fa3764ca5698c

    • SHA1

      f8d6f81123412483bd6b7c4d5c274cfa9641ba5f

    • SHA256

      4bc1777b46f5564b000745086680cb3d68c2f53fecb66cbfe44f50e78d54cfbf

    • SHA512

      e2fc0e7e090824ca6e6ec29c7a3333625d97a6d17f96d4ee06150552d34832e067fe2436f6a3f0337b111071851271311d86ee26496f70704fce9ccd1951eb62

    • SSDEEP

      24576:rxi0HFDXdVtTj2i64T+jdxQCfgOFD3WSwd2QtBBw6xxhVxQtmibjOhZaiRu/4oMN:RlZbTChxKCnFnQXBbrtgb/iQvu0UHOI

    Score
    7/10
    persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks