Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
120s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
25/04/2024, 16:35
General
-
Target
2024-04-25_e24c885022223e996b5985ab1ee64de5_icedid.exe
-
Size
430KB
-
MD5
e24c885022223e996b5985ab1ee64de5
-
SHA1
1f33de15219d885a39a8b2be6ebe8ef17397241b
-
SHA256
21a0bed7dcd9623abef9aecf9fbd7e838451020a5801c37fdeeabd822e8a0609
-
SHA512
61cebb237670179001196e7007337a183b150d7ea42292206cab1681a18d1b20ce2451928fa03ed8e1cf1acd6a80514cfeed5a30885e69a88a2932c1ea8ad723
-
SSDEEP
12288:splrVbDdQaqdS/ofraFErH8uB2Wm0SXsNr5FU:4xRQ+Fucuvm0as
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 2 IoCs
-
Drops file in Program Files directory 1 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-04-25_e24c885022223e996b5985ab1ee64de5_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-04-25_e24c885022223e996b5985ab1ee64de5_icedid.exe"1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\English\American.exe"C:\Program Files\English\American.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
430KB
MD55f2e62b79c5088b043b4517a980aa8d7
SHA189e2364c18e243ecc66da4bfedc1005861263880
SHA256a7495a70c41e49572b16fbbc71f1dc0caac9dc2eeab662a295a50c7e96446c09
SHA512db91dc0a319f0ead0a18976908650e6f6d967126ffd3d058f5e309ad95f4fb8adea67e323d933bfc091937addd7269852f2d0873bb863160abbd745b0ab27955