Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-05-01_b7c2a556cddefcc21c3bd3d92a60384d_icedid

  • Size

    725KB

  • Sample

    240501-e9ljtaab73

  • MD5

    b7c2a556cddefcc21c3bd3d92a60384d

  • SHA1

    cfc7ae75ccea6275f61fd96b9ccdf7d780c06fb9

  • SHA256

    66af4bca6262ee0c2b81007d288f60b534e78e8acbf38879f94d574244c13eaa

  • SHA512

    4de9a46c314ec1a66046c483711941bbbb4ec42db2a7d4df0fdda17f025fb84bc48289f34e494e90538e774dae81b6e5d1665a66bcaba91d90c1f79c26a36a6c

  • SSDEEP

    12288:znULCp8X4+X3PSwAD7k1Pazm26KICeLmIeWmd1KAjIGjnKw1PdriSOT5:zgqfk192sCeLgvd1KAjIGLKw1q5

Score
7/10

Malware Config

Targets

    • Target

      2024-05-01_b7c2a556cddefcc21c3bd3d92a60384d_icedid

    • Size

      725KB

    • MD5

      b7c2a556cddefcc21c3bd3d92a60384d

    • SHA1

      cfc7ae75ccea6275f61fd96b9ccdf7d780c06fb9

    • SHA256

      66af4bca6262ee0c2b81007d288f60b534e78e8acbf38879f94d574244c13eaa

    • SHA512

      4de9a46c314ec1a66046c483711941bbbb4ec42db2a7d4df0fdda17f025fb84bc48289f34e494e90538e774dae81b6e5d1665a66bcaba91d90c1f79c26a36a6c

    • SSDEEP

      12288:znULCp8X4+X3PSwAD7k1Pazm26KICeLmIeWmd1KAjIGjnKw1PdriSOT5:zgqfk192sCeLgvd1KAjIGLKw1q5

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks