Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

2024-04-17...id.exe

windows7-x64

7

2024-04-17...id.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    120s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    17/04/2024, 18:56

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    2024-04-17_27271944179419e4de1284c2bd5518c6_icedid.exe

  • Size

    275KB

  • MD5

    27271944179419e4de1284c2bd5518c6

  • SHA1

    d1312e218e00df8dd0578b80cc06281570285770

  • SHA256

    88fa48c3efcf5240bde8738e11be290f585b67c3759809b1fce02e8f819ae2bf

  • SHA512

    7095185e5d96cd376bd71ac71df34e30ab6f565d86c684b9b5bddee321693cc47acf4d4ba4a325a18f031e9643e15c6a885b0fc06afacdc6e0490cf3675fa135

  • SSDEEP

    3072:lxUm75Fku3eKeJk21ZSJReOqlz+mErj+HyHnNVIPL/+ybbiGF+1u46Q7q303lU8O:fU8DkpP1oJ1qlzUWUNVIT/bbbIW09R

Score
7/10

Malware Config

Signatures

  • Executes dropped EXE 1 IoCs
  • Loads dropped DLL 2 IoCs
  • Drops file in Program Files directory 2 IoCs
  • Suspicious use of SetWindowsHookEx 8 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-04-17_27271944179419e4de1284c2bd5518c6_icedid.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-04-17_27271944179419e4de1284c2bd5518c6_icedid.exe"
    1⤵
    • Loads dropped DLL
    • Drops file in Program Files directory
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1636
    • C:\Program Files\Polish\ortuguese.exe
      "C:\Program Files\Polish\ortuguese.exe" "33201"
      2⤵
      • Executes dropped EXE
      • Suspicious use of SetWindowsHookEx
      PID:2972

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • \Program Files\Polish\ortuguese.exe
    Filesize

    275KB

    MD5

    1b658add1bfbbf702a8299d80092e2fe

    SHA1

    f88eb5323f83372a3143082fd5a9abb67211432a

    SHA256

    39c74c3a4859d6aee2c804bd3d265ba40f0b2ac029d15a078e8ce8713018be7a

    SHA512

    e77bc2f3dfb5f4900d3f248aeb1163cb54017ba3b89b646820dd11104bfb1a8f6e28b68411c37034fc68298d2989b778ab93fb853dc8e0382f019eb99b473679

    Download Submit