Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
148s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
06/06/2024, 19:20
Static task
static1
Behavioral task
behavioral1
Sample
2024-06-06_b23877ed85f2f6101ff87b643b640002_icedid.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2024-06-06_b23877ed85f2f6101ff87b643b640002_icedid.exe
Resource
win10v2004-20240508-en
General
-
Target
2024-06-06_b23877ed85f2f6101ff87b643b640002_icedid.exe
-
Size
254KB
-
MD5
b23877ed85f2f6101ff87b643b640002
-
SHA1
6ad33b3c016ebfa6a569321a7464169d59e0b29e
-
SHA256
48ec3fdec99dc380bf44608f0f12874eedee891f2576cc2a22d4d818c988fb00
-
SHA512
95bd539252dcb5f1c66519493a3d47c33fe741c03c828792c309ddadf913597758022f2e3f10f6448ce005d2fbb02d8a5dd0e21707643f8631e22553a8895b89
-
SSDEEP
3072:E3BsLwdtuTqVKzDMvUSoLuP1vx49DqQ+oZ0boeIMlBNr8gpBTKkZoToI4cE8lUvy:ZwdkTqgZqNJyj+Nb7rRCG
Malware Config
Signatures
-
Detects executables packed with ASPack 2 IoCs
resource yara_rule behavioral2/memory/1356-0-0x0000000000400000-0x0000000000440000-memory.dmp INDICATOR_EXE_Packed_ASPack behavioral2/memory/1356-1-0x0000000000400000-0x0000000000440000-memory.dmp INDICATOR_EXE_Packed_ASPack -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 1356 2024-06-06_b23877ed85f2f6101ff87b643b640002_icedid.exe 1356 2024-06-06_b23877ed85f2f6101ff87b643b640002_icedid.exe