Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
150s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
-
submitted
19/03/2024, 07:03
General
-
Target
2024-03-19_52019771476e755171d38b13a699e2a6_ryuk.exe
-
Size
1.9MB
-
MD5
52019771476e755171d38b13a699e2a6
-
SHA1
c2865f2100bd11086b7fb7c2b0aaad7796f570c3
-
SHA256
1e5e94e575df29c9658821f0fa591aea984c14ef306db8bf060ca549aca570a4
-
SHA512
a01c6d135c3f6884b839edff6c0685a6fe0e61355c274753cfdc0ef252c9a7bca5610ece3133a757d56067652fc188c55f0f109db463ef6412b07019b48641d7
-
SSDEEP
49152:A6cZGizWCaFbYgDUYmvFur31yAipQCtXxc0H:iG5CaFbxU7dG1yfpVBlH
Score
5/10
Malware Config
Signatures
-
Drops file in System32 directory 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-03-19_52019771476e755171d38b13a699e2a6_ryuk.exe"C:\Users\Admin\AppData\Local\Temp\2024-03-19_52019771476e755171d38b13a699e2a6_ryuk.exe"1⤵
- Drops file in System32 directory
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.9MB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
1.9MB