Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-03-19_100df7e482ba8ae971b6b672d4371e04_ryuk
-
Size
4.9MB
-
Sample
240319-y68pqaee95
-
MD5
100df7e482ba8ae971b6b672d4371e04
-
SHA1
c981257b0cb79811690453eee6e197bc06ebecb5
-
SHA256
f81dcb0c4e066d914fb489331a2e7ba7e6036a23a887a2e979c9f8bb9735f6be
-
SHA512
dc2169087b790a3aacd64564c683874fad04eb702138285e7685e7079fdcea36d9cea022f54ce307a473fe2da9d0709bba0993843b88d74c07cd24c3e3c899a4
-
SSDEEP
98304:Kv3vuL2Y21b4MmrthsZFix0J4J/YzlvM:M3vuCYf/rthsDU0zlvM
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-19_100df7e482ba8ae971b6b672d4371e04_ryuk.exe
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
2024-03-19_100df7e482ba8ae971b6b672d4371e04_ryuk.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-03-19_100df7e482ba8ae971b6b672d4371e04_ryuk
-
Size
4.9MB
-
MD5
100df7e482ba8ae971b6b672d4371e04
-
SHA1
c981257b0cb79811690453eee6e197bc06ebecb5
-
SHA256
f81dcb0c4e066d914fb489331a2e7ba7e6036a23a887a2e979c9f8bb9735f6be
-
SHA512
dc2169087b790a3aacd64564c683874fad04eb702138285e7685e7079fdcea36d9cea022f54ce307a473fe2da9d0709bba0993843b88d74c07cd24c3e3c899a4
-
SSDEEP
98304:Kv3vuL2Y21b4MmrthsZFix0J4J/YzlvM:M3vuCYf/rthsDU0zlvM
Score10/10-
Modifies firewall policy service
-
Deletes itself
-
Executes dropped EXE
-