Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    134s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240419-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240419-enlocale:en-usos:windows10-2004-x64system
  • submitted
    08/05/2024, 01:33

General

  • Target

    2024-05-08_b406b52e47e4acea639b6ce627dba14a_icedid.exe

  • Size

    4.1MB

  • MD5

    b406b52e47e4acea639b6ce627dba14a

  • SHA1

    11e78db3c29cd0dc2af626f61adaaecd3730e01e

  • SHA256

    d5564fca5d043ef4406a6ff558da77462c797d4a0271106b85c52a5b88ca2c83

  • SHA512

    f55291b5ae4d56ec371fa4ad4dfee9d3cfabb3343be4ba9349254514592b94be66a369d64f5a2b6ac8b440ccdd32b320d7019cd920dc80efb6a1c43be25d0ca8

  • SSDEEP

    98304:r1FRm12YaZ0Jes4fJobqVsxgJBAUZLQz:ruZaUe2qV9JV

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-05-08_b406b52e47e4acea639b6ce627dba14a_icedid.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-05-08_b406b52e47e4acea639b6ce627dba14a_icedid.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:4572

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\iext1.fnr.bbs.125.la

    Filesize

    645KB

    MD5

    7acc7c3bff0126272adfadf36e485bca

    SHA1

    3018995638619dcb684b639f6e5978ec939c10fc

    SHA256

    11f300ccb52fb878aa5bac3711e97bb99d89628af80c078e8f9b8287aab097cd

    SHA512

    e18a2b3c3622146473dea71b61c18ffc5b15a6fd8b8889a0300636b21c9ce2e1b620b6d6f5d3da77e45ab63785437094c8fc809a1042e6aa874a97da49268753