Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
119s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240215-en -
resource tags
-
submitted
20/04/2024, 20:32
General
-
Target
2024-04-20_af084d85c1efd811e7a733733b6bd597_icedid.exe
-
Size
429KB
-
MD5
af084d85c1efd811e7a733733b6bd597
-
SHA1
55ecff0cffdf42c8c7df8e9cfb8d4ee96ca4cfa4
-
SHA256
13f35bec6b2250cef64b35b37bac9e5a46f02e7453d0e7213233bb6f8d098f2b
-
SHA512
e484365b503c90a384b912e613742e56bfb61d73ea6519096a9102a9b200001da35ef57dec0413561524651243376349328a37bcf471a5c0723b73534fb1fc82
-
SSDEEP
12288:qplrVbDdQaqdS/ofraFErH8uB2Wm0SXsNr5FU:GxRQ+Fucuvm0as
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 2 IoCs
-
Drops file in Program Files directory 1 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-04-20_af084d85c1efd811e7a733733b6bd597_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-04-20_af084d85c1efd811e7a733733b6bd597_icedid.exe"1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\instead\previous.exe"C:\Program Files\instead\previous.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
429KB
MD5fdd9a801101e26cad318a46522762117
SHA14f996a1a24bb9a25a74da38126c73e45192a1813
SHA256347832d3f1576e50c7488ebfc19591ea39db3bfc7a32fc84d9a534113c04ffc4
SHA5129cb6c79be28a9d36b25f224e0ec9d41da76590d615cb290bc5260cf45929864f896440600e364c88f61c6611cd66a23c6cc759055e57efe66cce5e46f52fb19f