Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-01-24_33ee39dff7a9021f13494d585033cab3_ryuk

  • Size

    4.1MB

  • Sample

    240124-mea4lafhh3

  • MD5

    33ee39dff7a9021f13494d585033cab3

  • SHA1

    a8201b6cb35b0e29eb3e706cd78b5d3541b9e00d

  • SHA256

    16715155a4262990fbfe87f96c345a5418a74ee5a41c7f846876baf48ad8086a

  • SHA512

    cf4f12c62cda3eb78e91a812bf4cca7947b8e844f26a56ad6f3d0faac9fbad8688cea365b44651385554ca4cfedf65fc764ca9cc51bb03f55e66d85d2b16c8ad

  • SSDEEP

    49152:45Viqwo4KxghcyJLBaSbvviqMjfBVrTFZ1bBzP7n1Y8/17MVfw1QSXm+RFvTCr9:4BfrrTFFqRlw6a+LC17DVqFJU

Score
7/10

Malware Config

Targets

    • Target

      2024-01-24_33ee39dff7a9021f13494d585033cab3_ryuk

    • Size

      4.1MB

    • MD5

      33ee39dff7a9021f13494d585033cab3

    • SHA1

      a8201b6cb35b0e29eb3e706cd78b5d3541b9e00d

    • SHA256

      16715155a4262990fbfe87f96c345a5418a74ee5a41c7f846876baf48ad8086a

    • SHA512

      cf4f12c62cda3eb78e91a812bf4cca7947b8e844f26a56ad6f3d0faac9fbad8688cea365b44651385554ca4cfedf65fc764ca9cc51bb03f55e66d85d2b16c8ad

    • SSDEEP

      49152:45Viqwo4KxghcyJLBaSbvviqMjfBVrTFZ1bBzP7n1Y8/17MVfw1QSXm+RFvTCr9:4BfrrTFFqRlw6a+LC17DVqFJU

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks