Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
143s -
max time network
145s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
-
submitted
23/01/2024, 04:56
General
-
Target
2024-01-23_08a825f5fed9b6bd16644ebd8aeefc17_ryuk.exe
-
Size
1.0MB
-
MD5
08a825f5fed9b6bd16644ebd8aeefc17
-
SHA1
1bad8da4ff863e741bd774f1fdf2c3eff866807d
-
SHA256
c478cb21d5defe60dd2b715aaf04a9785108c5e91c8db0712866b04b7fc330b7
-
SHA512
7d52fb06e473c6510829cb31ad7ec31f28e7633c91696bfc86be03bc60c9099805553acfb642cc405196ff917f4201091caf939614f69af50d56f1943627d18c
-
SSDEEP
24576:N6V6nC/AyqGizWCaFbyMsdZCA6N3Q6itdsOeg:N6cNGizWCaFb9sdZz6N3Q6itmOH
Score
5/10
Malware Config
Signatures
-
Drops file in System32 directory 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-01-23_08a825f5fed9b6bd16644ebd8aeefc17_ryuk.exe"C:\Users\Admin\AppData\Local\Temp\2024-01-23_08a825f5fed9b6bd16644ebd8aeefc17_ryuk.exe"1⤵
- Drops file in System32 directory
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.1MB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
1.1MB