Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
-
submitted
07/05/2024, 23:21
General
-
Target
2024-05-07_157bedf774b4e6671886778252c1921b_icedid.exe
-
Size
587KB
-
MD5
157bedf774b4e6671886778252c1921b
-
SHA1
a407c575551b3a6501cc96a9bf805cd8aed13e5d
-
SHA256
614bedc42e3e99bcc8f6acb7ceaa089e06b274594672cd05976a21c6fad027aa
-
SHA512
a2e02aa916e8f29cf1681cfa5e993c6f908795fbf91c134c740c7a85ae7b83521b63d4752856e92cce0133d9c28af8472f1e57842c948511b338055c1d05d8f2
-
SSDEEP
12288:EplrVbDdQaqdS/ofraFErH8uB2Wm0gXsNr5FU:AxRQ+Fucuvm0os
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 2 IoCs
-
Drops file in Program Files directory 1 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-05-07_157bedf774b4e6671886778252c1921b_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-05-07_157bedf774b4e6671886778252c1921b_icedid.exe"1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\GetDXVer\Sample.exe"C:\Program Files\GetDXVer\Sample.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
587KB
MD537b399afe823fd33bc313f835046985a
SHA1c795fde50c5082df980a90495de66c418c94a123
SHA256b95ce4720421426f3c45b1533f2195f7cf3ec953775a0f9e4e7c665c19b63722
SHA512c06792c23cd98a39907a0b2af5b1c5568e9901e9aea1143348edc84947c9e61db496a6c7c583675044188b473b310708d16b69d08ecd03ab34e7076a02cacc69
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB