Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

2024-10-14...id.exe

windows7-x64

7

2024-10-14...id.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-10-14_5736baf5cf78eb5887894c4cce25781f_icedid

  • Size

    2.3MB

  • Sample

    241014-fbyxxstcjk

  • MD5

    5736baf5cf78eb5887894c4cce25781f

  • SHA1

    7e9193c8c5a8ccf1ee26c1d98cfafb8113ed82a9

  • SHA256

    aa4a398bd43817f8f010e61a9cd8bbd9b0bd378db634f42376933feb169eb45a

  • SHA512

    e5171b6903ea2e03efec9f37fcf5f18e3da1940ac63ac571bb81287e3ba7e70f5980382206e182bb6ec6d82b6ca5bbe0d352425641ab83820321ead6f7eba79e

  • SSDEEP

    49152:RlIe3PyF7Y4UHJitsFEnyowKnvaNnuAlxsz64xucBT2+b/:RlI7M4UpiBnHwKnvaNnuAlg64xuU

Score
7/10
adwarediscoveryevasionstealertrojan

Malware Config

Targets

    • Target

      2024-10-14_5736baf5cf78eb5887894c4cce25781f_icedid

    • Size

      2.3MB

    • MD5

      5736baf5cf78eb5887894c4cce25781f

    • SHA1

      7e9193c8c5a8ccf1ee26c1d98cfafb8113ed82a9

    • SHA256

      aa4a398bd43817f8f010e61a9cd8bbd9b0bd378db634f42376933feb169eb45a

    • SHA512

      e5171b6903ea2e03efec9f37fcf5f18e3da1940ac63ac571bb81287e3ba7e70f5980382206e182bb6ec6d82b6ca5bbe0d352425641ab83820321ead6f7eba79e

    • SSDEEP

      49152:RlIe3PyF7Y4UHJitsFEnyowKnvaNnuAlxsz64xucBT2+b/:RlI7M4UpiBnHwKnvaNnuAlg64xuU

    Score
    7/10
    adwarediscoveryevasionstealertrojan

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks whether UAC is enabled

      evasiontrojan

    • Drops desktop.ini file(s)

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks