Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2025-03-25_6069a8244d0076a3bc521aa63548f1c4_icedid_luca-stealer_wapomi
-
Size
4.5MB
-
Sample
250325-n891fsv1cy
-
MD5
6069a8244d0076a3bc521aa63548f1c4
-
SHA1
cedc0bde4608e084b0197deff30c0ce9b72d458c
-
SHA256
e5d73960a91b16e6cb7fc8f7c9a230110aa059a2c6059f809405f5ae83f09217
-
SHA512
fac570ca41c2b994d3690df8bc935a657cff83fafa717fdcfe55ea5e91296c5ae701c63f2ea2c4c2b2f30246c87cac12be68975f0b0c96a376b9428f5abc1124
-
SSDEEP
98304:4b5FCCOeA8M8NqONbG9TZtp4FoCD0kE1+BVpKrx4DgvOpZbS:25M4NCTMd0kHpKrx4D4OpZbS
Static task
static1
Behavioral task
behavioral1
Sample
2025-03-25_6069a8244d0076a3bc521aa63548f1c4_icedid_luca-stealer_wapomi.exe
Resource
win7-20240903-en
Malware Config
Extracted
bdaejec
ddos.dnsnb8.net
Targets
-
-
Target
2025-03-25_6069a8244d0076a3bc521aa63548f1c4_icedid_luca-stealer_wapomi
-
Size
4.5MB
-
MD5
6069a8244d0076a3bc521aa63548f1c4
-
SHA1
cedc0bde4608e084b0197deff30c0ce9b72d458c
-
SHA256
e5d73960a91b16e6cb7fc8f7c9a230110aa059a2c6059f809405f5ae83f09217
-
SHA512
fac570ca41c2b994d3690df8bc935a657cff83fafa717fdcfe55ea5e91296c5ae701c63f2ea2c4c2b2f30246c87cac12be68975f0b0c96a376b9428f5abc1124
-
SSDEEP
98304:4b5FCCOeA8M8NqONbG9TZtp4FoCD0kE1+BVpKrx4DgvOpZbS:25M4NCTMd0kHpKrx4D4OpZbS
-
Bdaejec family
-
Detects Bdaejec Backdoor.
Bdaejec is backdoor written in C++.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-