Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
19/04/2024, 04:35
General
-
Target
2024-04-19_8a1769f96800f89d892ecd5a2b207c69_icedid.exe
-
Size
421KB
-
MD5
8a1769f96800f89d892ecd5a2b207c69
-
SHA1
11d2fcd14f9dfc437c59121ab22ea6dafb1b6c6d
-
SHA256
f353319cd5557404029077a46191c336bb00eae9acb25a87c38e0df729ab02fc
-
SHA512
14c95afbfda7e0ba048d4274ac7d4602ea6458d7c32504aa26b5566e1b3678944b9b44f2634d049a6b805673eb83cc6226d39a32403116d6dc07afdb0c20ca83
-
SSDEEP
12288:0plrVbDdQaqdS/KfraFErH8uB2Wm0SX/Nr5FU:wxRW+Fucuvm0a/
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 2 IoCs
-
Drops file in Program Files directory 1 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-04-19_8a1769f96800f89d892ecd5a2b207c69_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-04-19_8a1769f96800f89d892ecd5a2b207c69_icedid.exe"1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\Czech\Dutch.exe"C:\Program Files\Czech\Dutch.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
421KB
MD5b518cd213f87b6ca87aab3716eedb710
SHA1909d79376906e9c65cfb15e18e307bbc034d3d47
SHA256293ad1f9dd8247c6b1d4b386b970c80826671a922412cd73eb0f06ae90ae59ef
SHA5124f571caf3ccf491c7e3a66ada1ed0b3ef326f1ef5defc5a3ccb3214f13284559170b74f62c4d594e990decb27eef1cf035c5ba66c48573275e29a230ed5964b2
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.4MB