Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
120s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
22/04/2024, 14:22
General
-
Target
2024-04-22_733b80290149d1e017edefa22ff9cba9_icedid.exe
-
Size
584KB
-
MD5
733b80290149d1e017edefa22ff9cba9
-
SHA1
ad4ea4995c7578d7994eabc8f733b32f31b4513e
-
SHA256
7ad46685c9ad2ca65e263e9188b872183799570f9f0ba0ef192310fce5952e57
-
SHA512
d48e6e209e44ca3455fb6efa0be6da5641b0a1a0fe60bef59407ec10368edb7dcee8c1275e173c448ee4b04c9cd3685c910a36d04dab1e5306ba1f2bb2bd9ea9
-
SSDEEP
12288:VplrVbDdQaqdS/RfraFE/H8uB2Wm0SXsNr5FU:HxR1+FCcuvm0as
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 2 IoCs
-
Drops file in Program Files directory 1 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-04-22_733b80290149d1e017edefa22ff9cba9_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-04-22_733b80290149d1e017edefa22ff9cba9_icedid.exe"1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\languages\Chinese.exe"C:\Program Files\languages\Chinese.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
584KB
MD568f7846700088c594b6b822a47c8cfe5
SHA1a39680e29f0179eda03f50bb6ed969522537b321
SHA2564c98fc3a0758ae09600ccf7013bada275e1744b413be85f270abded4f441dd5d
SHA512a48a433f640ded4890b4b4b78b76841343ba5e7bb2d6dfeb310d840f3f506081db70b26c33f1e1a41e95f139f977e5ddba9ecaa22dc60fd50e49a0c2a33ab82c
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB