Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
122s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
-
submitted
10/01/2024, 05:58
General
-
Target
2024-01-09_9e4a12a5147dd7b0ddc37977623e3209_cobalt-strike_ryuk.exe
-
Size
946KB
-
MD5
9e4a12a5147dd7b0ddc37977623e3209
-
SHA1
59474bef995f58ccda7a3d419ede740c9012d743
-
SHA256
8b99d52da82d8c560a2b6629ebb8cfb4c162d3874d5a3156e7bbef74c17a522e
-
SHA512
e99c3f9d1eb6ab8fbb183f025dbd51b563593eaa6d9f81002e85aab7252bc6cf47e87dedc1bf6aca69889719ada12032396c00e0df70af64454e1e4393e2fabe
-
SSDEEP
24576:9TfnpwJ+Rbt/sBlDqgZQd6XKtiMJYiPU:5fdR/snji6attJM
Score
5/10
Malware Config
Signatures
-
Drops file in System32 directory 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-01-09_9e4a12a5147dd7b0ddc37977623e3209_cobalt-strike_ryuk.exe"C:\Users\Admin\AppData\Local\Temp\2024-01-09_9e4a12a5147dd7b0ddc37977623e3209_cobalt-strike_ryuk.exe"1⤵
- Drops file in System32 directory
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
384KB
-
Filesize
984KB
-
Filesize
984KB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
384KB