Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    0s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    13/02/2024, 15:04 UTC

Errors

Reason
platform exec: image=C:\Users\Admin\AppData\Local\Temp\2024-02-13_22f6dd8dbc54cf1baa14634284ed6591_ryuk.exe command="C:\Users\Admin\AppData\Local\Temp\2024-02-13_22f6dd8dbc54cf1baa14634284ed6591_ryuk.exe" wdir=C:\Users\Admin\AppData\Local\Temp Payload error: The application has failed to start because its side-by-side configuration is incorrect. Please see the application event log or use the command-line sxstrace.exe tool for more detail.

General

  • Target

    2024-02-13_22f6dd8dbc54cf1baa14634284ed6591_ryuk.exe

  • Size

    1.6MB

  • MD5

    22f6dd8dbc54cf1baa14634284ed6591

  • SHA1

    3bbaaeeb4416bfba3313bdb4ac487e872fb443ce

  • SHA256

    aab8b6971ec7b0c227e2ec7fa908da037b8097b33273928435139ef068986c39

  • SHA512

    6b6d5b0a1dfc11402f53f603e86d733d8145e2dd830c9b66886525e28f483c3e1cd1aacecf39999a111186aca62dbd35331d3aa0ba6cbce281f4c9e77fe0e54b

  • SSDEEP

    24576:2PxXh8qZZuu/utFy/e/HAuzlOpZeT3WpcndLxdmo+eXEVT3wvUzO:2Buq6eutM/6HAMlicJrmemTgvC

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-02-13_22f6dd8dbc54cf1baa14634284ed6591_ryuk.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-02-13_22f6dd8dbc54cf1baa14634284ed6591_ryuk.exe"
    1⤵
      PID:5092

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/5092-0-0x0000000140000000-0x00000001401B6000-memory.dmp

      Filesize

      1.7MB

    We care about your privacy.

    This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.