Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

2024-04-17...id.exe

windows7-x64

7

2024-04-17...id.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    147s
  • max time network
    153s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240412-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system
  • submitted
    17/04/2024, 18:56

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    2024-04-17_27271944179419e4de1284c2bd5518c6_icedid.exe

  • Size

    275KB

  • MD5

    27271944179419e4de1284c2bd5518c6

  • SHA1

    d1312e218e00df8dd0578b80cc06281570285770

  • SHA256

    88fa48c3efcf5240bde8738e11be290f585b67c3759809b1fce02e8f819ae2bf

  • SHA512

    7095185e5d96cd376bd71ac71df34e30ab6f565d86c684b9b5bddee321693cc47acf4d4ba4a325a18f031e9643e15c6a885b0fc06afacdc6e0490cf3675fa135

  • SSDEEP

    3072:lxUm75Fku3eKeJk21ZSJReOqlz+mErj+HyHnNVIPL/+ybbiGF+1u46Q7q303lU8O:fU8DkpP1oJ1qlzUWUNVIT/bbbIW09R

Score
7/10

Malware Config

Signatures

  • Executes dropped EXE 1 IoCs
  • Drops file in Program Files directory 2 IoCs
  • Suspicious use of SetWindowsHookEx 8 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-04-17_27271944179419e4de1284c2bd5518c6_icedid.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-04-17_27271944179419e4de1284c2bd5518c6_icedid.exe"
    1⤵
    • Drops file in Program Files directory
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2760
    • C:\Program Files\Russian\Spanish.exe
      "C:\Program Files\Russian\Spanish.exe" "33201"
      2⤵
      • Executes dropped EXE
      • Suspicious use of SetWindowsHookEx
      PID:1984

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Program Files\Russian\Spanish.exe
    Filesize

    275KB

    MD5

    4572f1fa643198eb2aae36a9d048d6ee

    SHA1

    640c5ece8409bcff99203280c65ae73410efb55f

    SHA256

    48e21af87f57ddea272d6b9658da355c175d5194db91695f4a0f698df4abe179

    SHA512

    e4e5e64b1e86f5790d6c0e3a5a1d8bd0a8cc5c5798ce73684873963a0a73b937249897099ac8bbed0bda69457b56d82b1f860572c7975e9c36a3dd251b7d3aed

    Download Submit