Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
120s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
29/04/2024, 03:53
General
-
Target
2024-04-29_523769697e9f510e671fa33a2302e06f_icedid.exe
-
Size
432KB
-
MD5
523769697e9f510e671fa33a2302e06f
-
SHA1
06c059fd475410fc9505dc2c2494ec5e38a3311e
-
SHA256
06f692f7c73fa9aac5c736d4e74c5b6eb2bb54ed13c5eb38f6568d6c1038f197
-
SHA512
55528984ce977cf30f26ee9891ade1a2f9225a6233f1c48106b4a48d1f132e82b5020ea2caf2bd763767067005d990dd66484be7f1c6e88a96e608bfe4992dd1
-
SSDEEP
12288:XplrVbDdQaqdS/ofraFErH8uB2Wm0SXsNr5FU:5xRQ+Fucuvm0as
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 2 IoCs
-
Drops file in Program Files directory 1 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-04-29_523769697e9f510e671fa33a2302e06f_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-04-29_523769697e9f510e671fa33a2302e06f_icedid.exe"1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\depend\function.exe"C:\Program Files\depend\function.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
432KB
MD5624ff18d2861cae3a49a32ace9f749ab
SHA1f39666f463a7d9c93223a85bde17341757869474
SHA256bcb0bcb1ee02509b48c4108e0a8ed598a41ae192ce4ac39875254c16a33b1f12
SHA512660047f3ca1c5dcb18980187d43d883c41fca316a568ea4e7a1734da9d9f89d9d0ca6d2631860120f9c1eb76c07739e889545cce029ec549794e1b731b95f972