Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    122s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    04/06/2024, 01:45

General

  • Target

    2024-06-04_4a3f6ff5a0d0acef3e5b8b46c08c399b_icedid.exe

  • Size

    19.9MB

  • MD5

    4a3f6ff5a0d0acef3e5b8b46c08c399b

  • SHA1

    9b6c0d0c572673ac3d97847ef10051ef392852ec

  • SHA256

    a74240f2a16f921a19b18db276573d1a01585e3fdb5edc0ded1fa72b98bce003

  • SHA512

    1b0041c370c869cfa62736369dd3147cb43378dc75afb54d9f3f36ed61eb9fbb3f75b10bd8503f311032e7a41328987598488d0dadee27afd8acfc8583cb921a

  • SSDEEP

    393216:mbGi0ZY/6XtrLUGUrlL4b++v3jDLZe6257iVrsUcrjjKEpi/jYQeZ:myi0Ze67FfjDLZ8QBcXJk/jYH

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-06-04_4a3f6ff5a0d0acef3e5b8b46c08c399b_icedid.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-06-04_4a3f6ff5a0d0acef3e5b8b46c08c399b_icedid.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:2172

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Templates\Zcom4519595\config.xml

    Filesize

    271B

    MD5

    84830ddf05409c21b48e978076f85d69

    SHA1

    ade4395d4625b067c8237918f09317172a3bceb9

    SHA256

    2252a495907b2db182d3547e02337f70ae8a41616b485624c555369ba8c47467

    SHA512

    79413180a92b9d4ba8aecf64dd0ef582579e0c969612888e1cc6b2857225355950d4c54ee9f11c829cde58e7d3449ed1312a09182d9178e63b9805c2c11e1b2f

  • C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Templates\Zcom4519595\filelist.xml

    Filesize

    4KB

    MD5

    4ec9c8ad5dc2244aa099d1e757cd11d3

    SHA1

    99182a2a11f36a553407b137909d4609b5735dea

    SHA256

    8585d0f13b970f912f6d8e395d9bebc84f76c031dede38621acee0d880015822

    SHA512

    59b649d7111b174b388dba4a65213e12b840f22b3036a3158872dac64c65c7db711d34f53b14068e50d7e34310a77d914add442050e43b0d6479ad0f3d75193f