Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

2024-06-20...id.exe

windows7-x64

1

2024-06-20...id.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    143s
  • max time network
    127s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240611-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
  • submitted
    20/06/2024, 02:25

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    2024-06-20_15758d6340260c4d709bac5eb2a6f57a_backswap_icedid.exe

  • Size

    2.8MB

  • MD5

    15758d6340260c4d709bac5eb2a6f57a

  • SHA1

    da699ffa159a9ed92ebfd70c987a12541b2e8a80

  • SHA256

    d148d09e678d11645e8582cbbcd74795d4bb1853e0843438fa9f99c9b657f882

  • SHA512

    393094f996e16a5a71b0741885ef2d482fa69c8f0eb5902ad20d05e6960438efce2e74e21601404a7e50c5a5609b59b0595ecefcb7eea485e08bb29bcbce6abf

  • SSDEEP

    49152:/A2bdtbvJg8fKupY4xm96szDW3sfdRlIsuYwfc7MUwjYbAhhT63lmj5WowLDOCWV:PLbvJg8fLY4xm/zDW3WlIsuYwfm8IAT1

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-06-20_15758d6340260c4d709bac5eb2a6f57a_backswap_icedid.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-06-20_15758d6340260c4d709bac5eb2a6f57a_backswap_icedid.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:1660

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads