Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
118s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
-
submitted
02/05/2024, 19:51
General
-
Target
2024-05-02_60b438726c3084943a7be9ab2c833e5f_icedid.exe
-
Size
587KB
-
MD5
60b438726c3084943a7be9ab2c833e5f
-
SHA1
0c1947dd2a55c138d48bd8bcfbd4405f4b2d60ad
-
SHA256
1d228c9372032d69d49b250c4e0aad98501e4c9d736093d2e663e22b27691f8b
-
SHA512
8fdc0036b8b12d79b5b3cb7fb48d8dc2cb63c95edeb487221a6d9c344dfa79e100cc4ed6a3256086484d8ba74febd3528a8d3b80ae99f4dec63ef0ee291a987b
-
SSDEEP
12288:0plrVbDdQaqdS/ofraFErH8uB2Wm0gXsNr5FU:wxRQ+Fucuvm0os
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 2 IoCs
-
Drops file in Program Files directory 1 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-05-02_60b438726c3084943a7be9ab2c833e5f_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-05-02_60b438726c3084943a7be9ab2c833e5f_icedid.exe"1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\novice\errors.exe"C:\Program Files\novice\errors.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
587KB
MD59ff7b093b854947c8b02756e2421e8d2
SHA10c691d3fa0f33fed2b9eaba5b80aed07540dee77
SHA25679b8019e96c6f637d5d7643ff323dc7e6bb8006098517904ea54e7a4e9e57155
SHA512bfb2f74b2e491c1f47451c0d66a7da5534a3203989d88e21bde8eb18b69ab354a5665abb44a907e79c2993dce1efca14035d426dab4235d578dc012a936ec2c5
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB