Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
118s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
22/12/2024, 04:52 UTC
General
-
Target
rely_x32.dll
-
Size
45KB
-
MD5
a4bed3d1585b79195ea9de8016f1a835
-
SHA1
903d2a6d2ea1e6415ce49d7c3e13f0be587bec91
-
SHA256
ce33860d7bc8a7df9426a9582cf054cf682bf8e26815aff27653badc40fdbae0
-
SHA512
3f654b3ce56a93a52745b539267ce52d1b239e2cbd9b0c645622f7c416366cae94203a0a7dc646ff12f82b8502d0bfa9d321931723767e470099894609ff58e2
-
SSDEEP
768:Zlp6zepEH8FYHeS+BRK/Ml9FG83OPQ6eMbwsEKhzl81dPfHodhLd09JYok8ZPW:ZTlEHDL+BRK/S9P3OY6eMnp4pQvddP8h
Score
10/10
Malware Config
Extracted
Family
icedid
Botnet
3415411565
C2
antnosience.com
seaskysafe.com
otectagain.top
dilimoretast.com
Attributes
-
auth_var
17
-
url_path
/news/
Signatures
-
IcedID, BokBot
IcedID is a banking trojan capable of stealing credentials.
-
Icedid family
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\rely_x32.dll,#11⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
20KB
-
Filesize
20KB
-
Filesize
20KB