Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
117s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
20/05/2024, 20:43
General
-
Target
2024-05-20_21db065b5d085495fc3a8bc689dde148_icedid.exe
-
Size
587KB
-
MD5
21db065b5d085495fc3a8bc689dde148
-
SHA1
7d9e79fb80e35340efc2ce7d4d221bbd6d123df8
-
SHA256
1b234d641fde39bc26d5701d64f59ab8a505a3748d4ff90d298f97def8a2e68b
-
SHA512
9f060f616a29dd2e67e7f5b00397399bb5c063ad36e44dabe9a20f3062462b7a551afa61e93446f6716d948079ad47a2daab1e6d527619c8ddf70edf16894130
-
SSDEEP
12288:9plrVbDdQaqdS/ofraFErH8uB2Wm0gXsNr5FU:fxRQ+Fucuvm0os
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 2 IoCs
-
Drops file in Program Files directory 1 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-05-20_21db065b5d085495fc3a8bc689dde148_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-05-20_21db065b5d085495fc3a8bc689dde148_icedid.exe"1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\Performs\facilitates.exe"C:\Program Files\Performs\facilitates.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
587KB
MD55f24965d9c6ea0a92cef776e94033b4d
SHA1899e8ae085c435d66cd478d9f22ad4ce159cbb09
SHA256763a8fbbfd9b0686d2224d146b9fa9bffb09ac6445973892bc309e4768a7ab94
SHA51230492295f8ce9f6e2f8e59fe02928f5a0f9eae54ae3a43899b0a46566c511e4a82207bf93a08348763f74f262604c6cb3e291f1938771a3d5c6007d566b130a0
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB