Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-01-27_f88efafa2a031ef0fc39e8a0c3635a2e_cobalt-strike_ryuk
-
Size
796KB
-
Sample
240127-3tg4fsgegq
-
MD5
f88efafa2a031ef0fc39e8a0c3635a2e
-
SHA1
8e1fa51deecc0f9465d65715e286420d3ce88401
-
SHA256
5622250df6633625db61a3fd6c28fb0af0905a52293ed3ada98c7e556dacb21a
-
SHA512
cf84f0457973aefb803b44e55b78b8def818912c2cd3c528da41be8e31750f4d3175ff741f38bf74c91c8493f835d88bdea4a207db0a87e27a6d0f5813dd4879
-
SSDEEP
24576:LANw243oVqIi2lObXobHAEW9INFJY0au:Lew2Bw7x03jY0a
Static task
static1
Behavioral task
behavioral1
Sample
2024-01-27_f88efafa2a031ef0fc39e8a0c3635a2e_cobalt-strike_ryuk.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-01-27_f88efafa2a031ef0fc39e8a0c3635a2e_cobalt-strike_ryuk.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
2024-01-27_f88efafa2a031ef0fc39e8a0c3635a2e_cobalt-strike_ryuk
-
Size
796KB
-
MD5
f88efafa2a031ef0fc39e8a0c3635a2e
-
SHA1
8e1fa51deecc0f9465d65715e286420d3ce88401
-
SHA256
5622250df6633625db61a3fd6c28fb0af0905a52293ed3ada98c7e556dacb21a
-
SHA512
cf84f0457973aefb803b44e55b78b8def818912c2cd3c528da41be8e31750f4d3175ff741f38bf74c91c8493f835d88bdea4a207db0a87e27a6d0f5813dd4879
-
SSDEEP
24576:LANw243oVqIi2lObXobHAEW9INFJY0au:Lew2Bw7x03jY0a
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
-