Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    149s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    24/05/2024, 16:09

General

  • Target

    2024-05-24_3049fc67cc9e9e05410deb3a2eb9a8fb_bkransomware_icedid.exe

  • Size

    916KB

  • MD5

    3049fc67cc9e9e05410deb3a2eb9a8fb

  • SHA1

    2216f1dfb25fe9b8f196476a3bd63aa017d8123a

  • SHA256

    ddaba8f83f15822c8ecf10787496b82f7c14234a66949d8c2bf4baaeade2f072

  • SHA512

    116b5d300aed4f60be1f61197e02befaccea3b8dba1cbc8267ecaf36b3ff4c30d6e29722006e8dd08678297a5a411c32b598ffd82dd58fdd89b0cd0ee5c687da

  • SSDEEP

    24576:nFg6z4FK5bLwYm8ScVdDP8O+z2sZiYME:nFg6zmK5bEYm8lVB8O+ztp

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-05-24_3049fc67cc9e9e05410deb3a2eb9a8fb_bkransomware_icedid.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-05-24_3049fc67cc9e9e05410deb3a2eb9a8fb_bkransomware_icedid.exe"
    1⤵
      PID:3012
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 3012 -s 532
        2⤵
        • Program crash
        PID:1092
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3012 -ip 3012
      1⤵
        PID:4628

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads