Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2025-03-25_2c9bfba20375f8cc8213e43bc35e98e3_icedid_ramnit

  • Size

    654KB

  • Sample

    250325-3mmqcst1dw

  • MD5

    2c9bfba20375f8cc8213e43bc35e98e3

  • SHA1

    a47bc943e7efd1a29efce4e96fdbdb711fd52792

  • SHA256

    0ec5e59782216923ae0cbf9b68047c56931e26f71c918942f68e10a42e43856c

  • SHA512

    8eea98bd17361e821fcfca1b8703608fa755a80aa4d034a5e18d80ad5d591f35a49a0513a740d2f17e3c6ba99dcb4d24a1410de568d479bfd1f0efcb14b22f4b

  • SSDEEP

    12288:mTLnp+BCQ5Zu60HnP12rrMAyYN2LEXBNj4Jtgs3TOxn:lCv60Ht2EAfUWPjVN

Malware Config

Targets

    • Target

      2025-03-25_2c9bfba20375f8cc8213e43bc35e98e3_icedid_ramnit

    • Size

      654KB

    • MD5

      2c9bfba20375f8cc8213e43bc35e98e3

    • SHA1

      a47bc943e7efd1a29efce4e96fdbdb711fd52792

    • SHA256

      0ec5e59782216923ae0cbf9b68047c56931e26f71c918942f68e10a42e43856c

    • SHA512

      8eea98bd17361e821fcfca1b8703608fa755a80aa4d034a5e18d80ad5d591f35a49a0513a740d2f17e3c6ba99dcb4d24a1410de568d479bfd1f0efcb14b22f4b

    • SSDEEP

      12288:mTLnp+BCQ5Zu60HnP12rrMAyYN2LEXBNj4Jtgs3TOxn:lCv60Ht2EAfUWPjVN

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Ramnit family

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks